(PVS) Signatures - Tenable Network Security

PVS ID: 3860 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:23835
Description: Synopsis :\n\nArbitrary code can be executed on the remote host through the email
client.\n\nThe remote host is running a version of Microsoft Outlook Express that contains
a security flaw that may allow an attacker to execute arbitrary code on the remote host. To
exploit this flaw, an attacker would need to send a malformed HTML email to a victim on
the remote host and have them open it.
Solution: Microsoft has released a set of patches for Outlook Express at
http://www.microsoft.com/technet/security/bulletin/ms06-076.mspx
CVE-2006-2386
FileZilla Server < 0.9.22 Multiple Remote DoS
PVS ID: 3861 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:23831
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS)
attack.\n\nAccording to its version, the FileZilla Server Interface installed on the remote
host is affected by several denial of service flaws that could be leveraged by an
authenticated attacker to crash the server and deny service to legitimate users.
Solution: Upgrade to version 0.9.22 or higher.
CVE Not available
JBoss JMX Console DeploymentFileRepository Directory Traversal File Manipulation
PVS ID: 3862 FAMILY: CGI RISK: HIGH NESSUS ID:23843
Description: The remote web server contains a Java service that is affected by a directory traversal flaw.
The remote web server appears to be a version of JBoss that fails to sanitize user-supplied
input to the BaseDir parameter used by the 'DeploymentFileRepository' service of JMX
Console before using it to store or delete files. An unauthenticated attacker may be able to
exploit this to alter files on the remote host subject to the privileges of the JBoss user.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-5750
CA Antivirus Client Detection
PVS ID: 3863 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: The remote host is a CA antivirus client.
Solution: N/A
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 999