(PVS) Signatures - Tenable Network Security

security restrictions and gain administrative access to the application. Specifically, the
'viewList()' function of the 'lib/WebGUI/Asset/Wobject/DataForm.pm' script fails to
validate user credentials and would allow an unauthenticated user access to confidential
data.
Solution: Upgrade to version 7.3.14 or higher.
eScan Agent Detection
CVE Not available
PVS ID: 4036 FAMILY: Generic RISK: NONE NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running antivirus.\n\nThe remote host is running
MicroWorld Agent server, an embedded service used by Microsoft antivirus software.
Solution: N/A
CVE Not available
FTP Server Zipped .xls File Detection
PVS ID: 4037 FAMILY: Data Leakage RISK: INFO NESSUS ID:Not Available
Description: The remote FTP server is hosting compressed (zipped) archives that contain .xls files. As
an example, consider the following file that is a part of a .zip archive and was just
downloaded by a remote FTP client\n%L\n\nDistributing files over FTP is a common way
of distributing information; however, efforts should be taken to ensure that the hosted files
do not contain confidential information.
Solution: N/A
CVE Not available
FTP Server Zipped .doc File Detection
PVS ID: 4038 FAMILY: Data Leakage RISK: INFO NESSUS ID:Not Available
Description: The remote FTP server is hosting compressed (zipped) archives that contain .doc files. As
an example, consider the following file that is a part of a .zip archive and was just
downloaded by a remote FTP client\n%L\n\nDistributing files over FTP is a common way
of distributing information; however, efforts should be taken to ensure that the hosted files
do not contain confidential information.
Solution: N/A
CVE Not available
FTP Server Zipped .ppt File Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4039 FAMILY: Data Leakage RISK: INFO NESSUS ID:Not Available
Family Internet Services 1047