[BlueOnyx:10471] Re: PCI Dss Compliance Issues

[Richard Barker]

Thank Ken I know all that but getting these companies like 
https://www.securitymetrics.com/
to understand is a real pain in the back side.

Today they told me the only acceptable php is 5.3.10 or hiring

Thanks again Ken

RC

On 5/7/2012 12:49 PM, Ken - Precision Web Hosting, Inc wrote:
> ----- Original Message -----
> From: Richard Barker
> To: BlueOnyx General Mailing List
> Sent: Sunday, May 06, 2012 6:12 AM
> Subject: [BlueOnyx:10452] PCI Dss Compliance Issues
>
>
> PCI Dss Compliance Issues for 5106R
>
> Description: Possible vulnerability in Net Tools PKI Server Severity: 
> Potential Problem CVE: CVE-2000-0739 CVE-2000-0740 CVE-2000-0741 
> Impact: Several vulnerabilities in Net Tools PKI server, if present, 
> could allow a remote attacker to execute arbitrary code or to view and 
> download any file on the server. Resolution Contact the vendor for 
> Hotfix 3 for Net Tools PKI Server 1.0. If Hotfix 3 or higher has 
> already been applied, then the system does not have these 
> vulnerabilities. Versions higher than 1.0 are not affected by these 
> vulnerabilities. Vulnerability Details: Service: 444:TCP Port 444/tcp 
> open
> <<
> Richard
> The admin area runs on port 444 and port 81.
> "Net Tools PKI Server" is windows software that runs on a windows server.
> ----
> Ken Marcus
> Precision Web Hosting, Inc.
> http://www.precisionweb.net
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20120507/9588a2ff/attachment.html>