[BlueOnyx:10470] Re: PCI Dss Compliance Issues

[Ken - Precision Web Hosting, Inc]

----- Original Message ----- 
From: Richard Barker 
To: BlueOnyx General Mailing List 
Sent: Sunday, May 06, 2012 6:12 AM
Subject: [BlueOnyx:10452] PCI Dss Compliance Issues


PCI Dss Compliance Issues for 5106R

Description: Possible vulnerability in Net Tools PKI Server Severity: Potential Problem CVE: CVE-2000-0739 CVE-2000-0740 CVE-2000-0741 Impact: Several vulnerabilities in Net Tools PKI server, if present, could allow a remote attacker to execute arbitrary code or to view and download any file on the server. Resolution Contact the vendor for Hotfix 3 for Net Tools PKI Server 1.0. If Hotfix 3 or higher has already been applied, then the system does not have these vulnerabilities. Versions higher than 1.0 are not affected by these vulnerabilities. Vulnerability Details: Service: 444:TCP Port 444/tcp open 
<<


Richard

The admin area runs on port 444 and port 81.  
"Net Tools PKI Server" is windows software that runs on a windows server. 


----
Ken Marcus
Precision Web Hosting, Inc.
http://www.precisionweb.net






-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20120507/5847f2ae/attachment.html>