27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

leverage these issues to execute arbitrary code as the current user.<br />

Solution: Upgrade to version 3.1.6.0 or higher.<br />

CVE-2007-3305<br />

AOL Instant Messenger <<br />

<strong>PVS</strong> ID: 4103 FAMILY: Internet Messengers RISK: HIGH NESSUS ID:Not Available<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe<br />

remote host is running AOL Instant Messenger (AIM). Versions 6.1.32.1 and lower are<br />

reported vulnerable to a remote Denial of Service (DoS) attack. An attacker exploiting this<br />

flaw would only need to be able to initiate a SIP session to the AIM client. Successful<br />

exploitation would result in the Instant Messenger client crashing.<br />

Solution: Upgrade to a version higher than 6.1.32.1.<br />

CVE-2007-3350<br />

AOL Instant Messenger 6 Version Detection<br />

<strong>PVS</strong> ID: 4104 FAMILY: Internet Messengers RISK: INFO NESSUS ID:Not Available<br />

Description: The remote client is running AOL Instant Messenger version: \n %L<br />

Solution: N/A<br />

CVE Not available<br />

SJPhone SIP Client INVITE Transaction Remote DoS<br />

<strong>PVS</strong> ID: 4105 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available<br />

Description: Synopsis : \n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe<br />

remote host is running the SJPhone VoIP SIP client: \n %L \nThis protocol is used to<br />

connect VoIP users via the Internet. Further, it is alleged that certain versions of SJPhone<br />

(prior to 1.65.377a) are prone to a Denial of Service flaw.<br />

Solution: Upgrade or patch according to vendor recommendations.<br />

SIP Client Detection<br />

CVE-2007-3351<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

<strong>PVS</strong> ID: 4106 FAMILY: Generic RISK: INFO NESSUS ID:Not Available<br />

Description: The remote host is running the following SIP client: \n %L \nThis protocol is used to<br />

connect VoIP users via the Internet.<br />

Family Internet Services 1065

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!