(PVS) Signatures - Tenable Network Security

PVS ID: 4068 FAMILY: Data Leakage RISK: INFO NESSUS ID:Not Available
Description: The remote FTP client was observed uploading an archive (zipped) file that contained a
.pdf file. As an example, consider the following file that is a part of a .zip archive and was
just uploaded to a remote FTP server\n%L\n\nDistributing files over FTP is a common way
of distributing information. However, efforts should be taken to ensure that confidential
files are not uploaded via FTP.
Solution: N/A
CVE Not available
OpenOffice Version Information
PVS ID: 4069 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the OpenOffice suite of business tools. The exact version is
\n%L
Solution: N/A
CVE Not available
Openfire < 3.3.1 Admin Console Privilege Escalation
PVS ID: 4070 FAMILY: Web Servers RISK: HIGH NESSUS ID:25343
Description: Synopsis :\n\nThe remote web server allows unauthenticated access to its administrative
console.\n\nThe remote host is running Openfire / Wildfire, an instant messaging server
supporting the XMPP protocol.\n\nThe version of Openfire or Wildfire installed on the
remote host allows unauthenticated access to a servlet, which could allow a malicious user
to upload code to Openfire via its admin console.
Solution: Either firewall access to the admin console on this port or upgrade to Openfire version 3.3.1
or higher.
CVE-2007-2975
Mozilla Firefox < 1.5.0.12 / 2.0.0.4 Multiple Vulnerabilities
PVS ID: 4071 FAMILY: Web Clients RISK: HIGH NESSUS ID:25349
Description: Synopsis :\n\nThe remote Windows host contains a web browser that is affected by
multiple vulnerabilities.\n\nThe installed version of Firefox is affected by various security
issues, one of which may lead to execution of arbitrary code on the affected host subject to
the user's privileges.
Solution: Upgrade to version 1.5.0.12 / 2.0.0.4 or higher.
CVE-2007-1362
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1056