(PVS) Signatures - Tenable Network Security

CVE-2006-6026
IDA Pro Disassembler Software Detection
PVS ID: 3954 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: The remote client is running the IDA Pro Disassembler Program. This program is used to
analyze binary files. The reported user and version is\n%L
Solution: Ensure that this software is authorized for your network and that the version of IDA Pro is
properly licensed.
CVE Not available
IDA Pro Remote Debugger Server Authentication Bypass
PVS ID: 3955 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the
bypassing of authentication.\n\nThe remote host is running DataRescue IDA
Pro, a commercial disassembler. This version of IDA Pro is vulnerable to a flaw
in the way that it handles remote data passed to the processor_request()
function, an authentication function. An attacker exploiting this flaw can bypass
authentication and execute commands anonymously. Successful exploitation
gives the attacker the ability to execute arbitrary commands on the remote
system.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2007-1666
SIPScan VOIP Vulnerability Scanner Detection
PVS ID: 3956 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote client is scanning the network with the SIPScan VOIP vulnerability scanner.
This tool scans networks and detects vulnerable VOIP SIP phones.
Solution: Ensure that such scanning is in alignment with corporate policies and guidelines.
CVE Not available
SIPScan VOIP Vulnerability Scanner Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3957 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote client is scanning the network with the SIPScan VOIP vulnerability scanner.
This tool scans networks and detects vulnerable VOIP SIP phones. The version of SIPScan
is\n%L
Family Internet Services 1025