(PVS) Signatures - Tenable Network Security

PVS ID: 4484 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host passes information across the network in an insecure
manner.\n\nThe remote host is running the CA eTrust SCM application. The administrative
interface is enabled on this host. Further, PVS has just observed a client logging in with
plaintext credentials. Confidential data, such as administrative passwords, should always be
passed over encrypted or secured channels. The observed user account was\n%P
Solution: Force the use of encryption during login and all administrative functions.
CVE Not available
eTrust SCM SMTP Version Detection
PVS ID: 4485 FAMILY: SMTP Clients RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the eTrust SCM SMTP notification service. This service is used
to notify administrators when new software or signature updates have been made available.
The reported version is: \n %L
Solution: N/A
CVE Not available
ePOclient Version Detection
PVS ID: 4486 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the McAfee ePOclient version: \n %L
Solution: Ensure that you are running the latest version of this software.
CVE Not available
Malicious Website - Embedded Javascript Detection
PVS ID: 4487 FAMILY: Backdoors RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server may have had malicious code injected.\n\nThe remote
web server may have been infected with a malicious script tag. These tags usually point to a
malicious site that is hosting code designed to subvert the security of the client machine.
The observed Javascript was '%L'
Solution: Ensure that the server is not serving malicious or injected script tags.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
WordPress < 2.5.1 Crafted Cookie Authentication Bypass
PVS ID: 4488 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Family Internet Services 1171