(PVS) Signatures - Tenable Network Security

Altiris AClient < 6.9.164 Multiple Vulnerabilities
PVS ID: 4419 FAMILY: Generic RISK: HIGH NESSUS ID:31417
Description: Synopsis :\n\nThe remote Windows host has a program that is affected by multiple
privilege escalation vulnerabilities.\n\nThe version of the Altiris Client Agent (aclient)
installed on the remote host is reportedly susceptible to a shatter attack that could allow a
local user to elevate his or her privileges on the affected system.
Solution: Upgrade to version 6.9.164 or higher.
CVE-2008-1754
phpList < 2.10.9 Multiple Remote File Inclusion
PVS ID: 4420 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote web server contains a PHP application that is susceptible to
multiple remote file inclusion attacks.\n\nThe version of phpList installed on the remote
host fails to filter user input to the '_SERVER[ConfigFile]' and '_ENV[CONFIG]'
parameters of the 'admin/index.php' script before passing it to PHP 'include()' functions.
Provided PHP's 'register_globals' setting is disabled, an unauthenticated attacker can exploit
this issue to view arbitrary files on the remote host or to execute arbitrary PHP code,
possibly taken from third-party hosts. The reported version of phpList is: \n %L
Solution: Upgrade to version 2.10.9 or higher.
CVE Not available
Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (949031)
PVS ID: 4421 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:31414
Description: Synopsis :\n\nArbitrary code can be executed on the remote host through the email
client.\n\nThe remote host is running a version of Outlook or Exchange that is vulnerable to
a bug when processing a specially malformed URI mailto: link, which can let an attacker
execute arbitrary code on the remote host by sending a specially crafted email.\nIAVA
Reference : 2008-A-0012\nSTIG Finding Severity : Category II
Solution: Microsoft has released a set of patches for Outlook 2000, XP, 2003 and 2007.
SSF Server Detection
CVE-2008-0110
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4422 FAMILY: SSH RISK: LOW NESSUS ID:31421
Description: Synopsis :\n\nThe remote version of the SSH server is no longer maintained.\n\nAccording
to its banner, the remote SSH server is a SSF derivative. SSF had been written to be
compliant with restrictive laws on cryptography in some European countries. These
regulations have been softened and OpenSSH received a formal authorization from the
Family Internet Services 1153