(PVS) Signatures - Tenable Network Security

Description: The remote host is running WinRemotePC, a software application that allows for remote
desktop administration of the machine.
Solution: Ensure that such a solution is in alignment with corporate policies and guidelines.
CVE Not available
RunCMS < 1.6.2 Multiple Script Remote File Inclusion
PVS ID: 4597 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a script injection attack.\n\nThe remote host
is running RunCMS, a web-based content management and messaging system. This version
of RunCMS is reported to be vulnerable to a number of remote file inclusion
vulnerabilities. Specifically, the 'votepolls.php' and 'config.php' scripts can be tricked into
opening and running scripts from a malicious webserver. An attacker exploiting these flaws
would only need the ability to send requests to the application. Successful exploitation
would result in the attacker executing arbitrary script code on the server.
Solution: Upgrade to version 1.6.2 or higher.
CVE-2008-3354
OpenSSH X11 < 5.1 Session Hijacking
PVS ID: 4598 FAMILY: SSH RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a local 'session hijacking'
flaw.\n\nAccording to its banner, the version of SSH installed on the remote host is older
than 5.1. Such versions may allow a local user to hijack X11 sessions because it improperly
checks user privileges before re-binding a port. In order for the attack to be successful, the
'X11UseLocalhost' option would need to be disabled. By default, the option is enabled.
Further, the OpenSSH service would need to be running on an operating system (such as
HP-UX) where the effective user ID is not checked.
Solution: Upgrade to version 5.1 or higher.
CVE-2008-3259
EMC Retrospect Backup Client Version Detection
PVS ID: 4599 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the EMC Retrospect backup client. This host allows a
server to connect and access data remotely. This application listens on port 497/tcp
for connections. The reported version number is: \n %L
Solution: Ensure that only valid IP addresses can access the service.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1203