(PVS) Signatures - Tenable Network Security

strings, can overwrite critical system files. In both instances, the attacker only
needs to be able to send files that are processed by ClamAV.
Solution: Upgrade to version 0.90.0 or higher.
CVE-2007-0898
SpamAssassin < 3.1.8 Malformed HTML Long URI DoS
PVS ID: 3918 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running SpamAssassin, an anti-spam software application that detects and
blocks spam emails. Due to a content-parsing error, SpamAssassin can be crashed when
processing very long URIs within an email message. An attacker exploiting this flaw would
only need to have the ability to craft and send an email. Successful exploitation leads to a
loss of availability.
Solution: Upgrade to version 3.1.8 or higher.
CVE-2007-0451
Catbird Appliance Detection
PVS ID: 3919 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the Catbird security appliance.
Solution: N/A
CVE Not available
BitTorrent Client Detection
PVS ID: 3920 FAMILY: Peer-To-Peer File Sharing
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote host is running the Bittorrent client.\nBitTorrent is a client
application that allows users to quickly download files from multiple locations.
Solution: Ensure that BitTorrent is allowed with respect to corporate policies and guidelines.
CVE Not available
IBM DB2 Multiple Local Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3921 FAMILY: Database RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1015