(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 10.4.11 or higher.
CVE-2007-4701
Samba < 3.0.27 Multiple Vulnerabilities
PVS ID: 4285 FAMILY: Samba RISK: HIGH NESSUS ID:28228
Description: Synopsis :\n\nThe remote Samba server may be affected one or more vulnerabilities.\n\n
According to its banner, the version of the Samba server ('%L') on the remote host contains
a boundary error in the 'reply_netbios_packet()' function in 'nmbd/nmbd_packets.c' when
sending NetBIOS replies. Provided the server is configured to run as a WINS server, a
remote attacker can exploit this issue by sending multiple specially-crafted WINS 'Name
Registration' requests followed by a WINS 'Name Query' request, leading to a stack-based
buffer overflow and allow for execution of arbitrary code.\nThere is also a stack buffer
overflow in nmbd's logon request processing code that can be triggered by means of
specially-crafted GETDC mailslot requests when the affected server is configured as a
Primary or Backup Domain Controller. The Samba security team currently does not believe
this particular vulnerability can be exploited to execute arbitrary code remotely.
Solution: Upgrade to version 3.0.27 or later.
CVE-2007-5398
WebSphere HTML 'Expect' Header HTML Injection
PVS ID: 4286 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an HTML injection attack.\n\nThe remote
WebSphere server is running version '%L'.\nThis version is reported to be vulnerable to an
HTML injection flaw. An attacker exploiting this flaw would need to create a custom
request that utilized custom 'Expect' headers and be able to convince unsuspecting users to
launch the URI. Successful exploitation would result in an attacker gaining access to
confidential client data.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2007-5944
VMWare Server Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4287 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running VMWare server, an application that allows users to run multiple
operating systems virtually. Further, this instance of VMWare is a server application that
allows remote administrator access to the VMWare console. The displayed banner is '%L'
Solution: Only allow administrative VMWare connections from trusted hosts.
Family Internet Services 1115