This script is Copyright (C) 2011-2014 Tenable Network Security, Inc.
The remote FreeBSD host is missing one or more security-related
Jan Lieskovsky reports :
Importing a specially crafted XML file which contains an XML entity
injection permits to retrieve a local file (limited by the privileges
of the user running the web server).
See also :
Update the affected packages.
Risk factor :
Medium / CVSS Base Score : 4.3