(PVS) Signatures - Tenable Network Security

Description: The remote server is forwarding email in a manner consistent with many SPAM/UCE
servers. The SMTP header that PVS flagged on was: \n %L
realtime
Solution: Ensure that this email server is authorized to send SPAM/UCE emails.
CVE Not available
Malicious Website - Embedded Iframe Detection
PVS ID: 4470 FAMILY: Backdoors RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server may have had malicious code injected.\n\nThe remote
web server may have been infected with a malicious 'IFRAME' tag. These tags usually
point to a malicious site that is hosting code designed to subvert the security of the client
machine. The observed iframe was '%L'
Solution: Ensure that the server is not serving malicious or injected IFRAME tags.
CVE Not available
Malware Payload Code Detection
PVS ID: 4471 FAMILY: Backdoors RISK: HIGH NESSUS ID:31854
Description: Synopsis :\n\nThe remote service appears to be distributing the payload of malware
code.\n\nThe remote port seems to be sending the payload of a malware. This is used by
malware when spreading by infecting other hosts. The system is probably infected by a
worm or a Trojan horse.
Solution: Inspect the system for malicious code and follow appropriate incident response procedures.
CVE Not available
Safari < 3.1.1 PCRE Nested Repetition Count Overflow
PVS ID: 4472 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of Apple Safari that is less than 3.1.1. The reported version is
'%L'\n\nThis version of Safari is vulnerable to a remote exploit. An attacker exploiting this
flaw would need to be able to entice a user to browse to a malicious URI and further entice
the user to download a file. Successful exploitation would result in the attacker executing
arbitary code. In addition, this version of Safari is running a version of AppleWebKit that is
less than 525.18. There are a number of flaws associated with that version of AppleWebKit
as well.
Solution: Upgrade to version 3.1.1 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1167