(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote Samba server is affected by multiple
vulnerabilities.\n\nAccording to its banner, the version of the Samba server installed on the
remote host ('%L') is affected by multiple buffer overflow and remote command injection
vulnerabilities that can be exploited remotely, as well as a local privilege escalation bug.
The reported version number of Samba is\n%L
Solution: Upgrade to version 3.0.25 or higher.
CVE-2007-2447
BitTorrent Server Detection
PVS ID: 3991 FAMILY: Peer-To-Peer File Sharing
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote host is running a BitTorrent server.\nBitTorrent is a P2P
application that allows users to quickly download files from multiple locations.
Solution: Ensure that BitTorrent is allowed with respect to corporate policies and guidelines.
CVE Not available
Resin < 3.1.1 Directory Traversal Vulnerability (2)
PVS ID: 3992 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:25241
Description: Synopsis :\n\nThe remote web server is prone to a directory traversal attack. \n\nThe
remote host is running Resin, an application server. The installation of Resin on the remote
host allows an unauthenticated remote attacker to gain access to the web-inf directories, or
any known subdirectories, on the affected Windows host, which may lead to a loss of
confidentiality.
Solution: Upgrade to version 3.1.1 or higher.
CVE-2007-2440
MySQL < 5.1.18 Multiple Vulnerabilities
PVS ID: 3993 FAMILY: Database
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:25242
Description: Synopsis :\n\nThe remote database server is affected by multiple vulnerabilities.\n\nThe
version of MySQL installed on the remote host reportedly is affected by three issues :\n\n-
A user can rename a table without having DROP privileges.\n\n-If a stored routine is
declared as 'SQL SECURITY INVOKER', a user may be able to gain privileges by
invoking that routine.\n\n-A user with only ALTER privileges on a partitioned table can
discover information about the table that should require SELECT privileges.
Family Internet Services 1035