(PVS) Signatures - Tenable Network Security

Description: The remote host is running MySpaceIM, an application that allows MySpace users to chat
with one another.
Solution: Ensure that such chat clients are authorized according to corporate policies and guidelines.
CVE Not available
.pst File Email Attachment Detection
PVS ID: 3940 FAMILY: Data Leakage RISK: LOW NESSUS ID:Not Available
Description: The remote host was just observed sending the following .pst file.%L\nThe file was
observed as an email attachment. If the file is confidential, check your mail server logs to
see who the sender and/or recipient was.
Solution: N/A
CVE Not available
.pst Office File Detection
PVS ID: 3941 FAMILY: Data Leakage RISK: INFO NESSUS ID:Not Available
Description: The remote web server is hosting .pst files. As an example, consider the following
file %P\nThe webmaster should ensure that they do not contain confidential data.
Solution: N/A
CVE Not available
LedgerSMB / SQL-Ledger Authentication Bypass
PVS ID: 3942 FAMILY: Web Servers RISK: HIGH NESSUS ID:24748
Description: Synopsis :\n\nThe remote web server contains a Perl application that is prone to an
authentication bypass issue.\n\nThe remote host is running LedgerSMB or SQL-Ledger, a
web-based double-entry accounting system. The version of LedgerSMB or SQL-Ledger on
the remote host contains a design flaw that can be leveraged by a remote attacker to bypass
authentication and can gain administrative access of the application.
Solution: If using LedgerSMB, upgrade to 1.1.9 or higher. There is no known solution for
SQL-Ledger at this time.
CVE-2007-0777
.ost File Email Attachment Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3943 FAMILY: Data Leakage RISK: LOW NESSUS ID:Not Available
Family Internet Services 1021