Open Source Security Tools : Practical Guide to Security Applications part 51. Few frontline system administrators can afford to spend all day worrying about security. But in this age of widespread virus infections, worms, and digital attacks, no one can afford to neglect network defenses. Written with the harried IT manager in mind, Open Source Security Tools is a practical, hands-on introduction to open source security tools. | Page 479 Friday June 25 2004 1 50 PM Appendix E Nessus Plug-ins 479 Family Plug-in Name CVE ID Number s BugTraq ID Number s CGI abuses perl interpreter can be launched as a CGI CAN-1999-0509 CGI abuses lednews XSS 7920 CGI abuses Siteframe Cross Site Scripting Bugs 7140 7143 CGI abuses check CVE-1999-0191 1818 CGI abuses ASP source using DATA trick CVE-1999-0278 149 CGI abuses overflow CAN-2000-0256 1117 CGI abuses IIS Directory listing through WebDAV CVE-2000-0951 1756 CGI abuses Microsoft Frontpage backdoor CVE-2000-0260 1109 CGI abuses Unknown CGIs arguments torture CGI abuses directory traversal and arbitrary command execution 6055 6058 5393 CGI abuses SQLQHit Directory Structure Disclosure CAN-2001-0986 3339 CGI abuses ColdFusion Path Disclosure CVE-2002-0576 4542 CGI abuses Zeus Admin Interface XSS 7751 CGI abuses wrap CVE-1999-0149 373 CGI abuses ezPublish Cross Site Scripting Bugs CAN-2003-0310 7137 7138 CGI abuses Vignette StoryServer Information Disclosure CAN-2002-0385 CGI abuses Shells in cgi-bin CAN-1999-0509 Page 480 Friday June 25 2004 1 50 PM 480 Appendix E Nessus Plug-ins Family Plug-in Name CVE ID Number s BugTraq ID Number s CGI abuses E-Shopping Cart Arbitrary Command Execution WebDiscount CAN-2001-1014 3340 CGI abuses vulnerability CAN-2001-0922 CGI abuses PHP Mail Function Header Spoofing Vulnerability CAN-2002-0985 5562 CGI abuses Rich Media E-Commerce Stores Sensitive Information Insecurely 4172 CGI abuses Passwordless frontpage installation CGI abuses myServer Directory Traversal Vulnerability CGI abuses SquirrelMail s Multiple Flaws 7952 CGI abuses PT News Unauthorized Administrative Access 7394 CGI abuses BroadVision Physical Path Disclosure Vulnerability CAN-2001-0031 2088 CGI abuses FastCGI Cross Site Scripting CGI abuses vulnerability CAN-2002-0236 3784 CGI abuses doc packages directory browsable CVE-2000-1016 1707
