27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>PVS</strong> ID: 4120 FAMILY: CGI RISK: HIGH NESSUS ID:25691<br />

Description: Synopsis :\n\nThe remote .NET Framework is vulnerable to code execution attack.\n\nThe<br />

remote host is running a version of the ASP.NET framework that contains multiple<br />

vulnerabilities :\n\n- PE Loader Vulnerability: could allow an attacker to execute arbitrary<br />

code with the privilege of the logged-on user;\n\n- ASP.NET NULL Byte Termination<br />

Vulnerability: could allow an attacker to retrieve the content of the web server;\n\n- JIT<br />

Compiler Vulnerability: could allow an attacker to execute arbitrary code with the privilege<br />

of the logged-on user.\nIAVA Reference : 2007-A-0037\nSTIG Finding Severity :<br />

Category II<br />

Solution: Microsoft has released a set of patches for .NET Framework 1.0, 1.1 and 2.0.<br />

CVE-2007-0043<br />

Vulnerabilities in .NET Framework Could Allow Remote Code Execution (931212)<br />

<strong>PVS</strong> ID: 4121 FAMILY: CGI RISK: HIGH NESSUS ID:25691<br />

Description: Synopsis :\n\nThe remote .NET Framework is vulnerable to code execution attack.\n\nThe<br />

remote host is running a version of the ASP.NET framework that contains multiple<br />

vulnerabilities :\n\n- PE Loader Vulnerability: could allow an attacker to execute arbitrary<br />

code with the privilege of the logged-on user;\n\n- ASP.NET NULL Byte Termination<br />

Vulnerability: could allow an attacker to retrieve the content of the web server;\n\n- JIT<br />

Compiler Vulnerability: could allow an attacker to execute arbitrary code with the privilege<br />

of the logged-on user.\nIAVA Reference : 2007-A-0037\nSTIG Finding Severity :<br />

Category II<br />

Solution: Microsoft has released a set of patches for .NET Framework 1.0, 1.1 and 2.0.<br />

CVE-2007-0043<br />

Potential SPAM Server Detection<br />

<strong>PVS</strong> ID: 4122 FAMILY: SMTP Servers<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:Not Available<br />

Description: The remote server is forwarding email in a manner consistent with many SPAM/UCE<br />

servers. The SMTP header that <strong>PVS</strong> flagged on was: \n %L<br />

realtimeonly<br />

Solution: Ensure that this email server is authorized send SPAM/UCE emails.<br />

CVE Not available<br />

Potential SPAM Server Detection<br />

<strong>PVS</strong> ID: 4123 FAMILY: SMTP Servers<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

RISK:<br />

MEDIUM<br />

NESSUS ID:Not Available<br />

Family Internet Services 1070

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!