(PVS) Signatures - Tenable Network Security

Description: The remote host is running the eTrust SCM SMTP notification service. This service is used
to notify administrators when new software or signature updates have been made available.
The reported version(s) of the antivirus signatures is: \n %L
Solution: N/A
CVE Not available
PHP < 5.2.6 Multiple Vulnerabilities
PVS ID: 4493 FAMILY: Web Servers RISK: HIGH NESSUS ID:32123
Description: Synopsis :\n\nThe remote web server uses a version of PHP that is affected by
multiple flaws.\n\nAccording to its banner ('%L'), the version of PHP installed
on the remote host is older than 5.2.6. Such versions may be affected by the
following issues :\n\n - A stack buffer overflow in FastCGI SAPI.\n - An integer
overflow in printf().\n - An unspecified security issue tracked by
CVE-2008-0599.\n - A safe_mode bypass in cURL.\n - Incomplete handling of
multibyte chars inside escapeshellcmd().\n - Issues in the bundled PCRE fixed
by version 7.6.
Solution: Upgrade to version 5.2.6 or higher.
CVE-2008-0599
SAP MaxDB Multiple Vulnerabilities
PVS ID: 4494 FAMILY: Database RISK: HIGH NESSUS ID:32194
Description: Synopsis :\n\nThe remote database server is affected by multiple issues.\n\nThe remote
host is running MaxDB, a database server from SAP. According to its version, the remote
server is affected by multiple flaws.\n \n - A vulnerability in the 'vserver' process could
allow an unauthenticated attacker to execute arbitrary code, subject to the privileges of the
user under which the process operates. In order to successfully exploit this issue, an
attacker must have prior knowledge of an active database name on the server.\n - A design
error in 'sdbstarter' could allow an attacker to elevate his privileges to root level.\n - A
vulnerability in cons.exe could allow command execution before authenticating to the
database server.
Solution: Upgrade to SAP MaxDB 7.7.04 Build 08 / 7.7.03 Build 23 / 7.7.02 Build 20 / 7.6.05 Build
02 / 7.6.04 Build 06 / 7.6.03 Build 15 / 7.5.00 Build 48 or higher.
CVE-2008-0307
Novell eDirectory Version Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4495 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Family Internet Services 1173