(PVS) Signatures - Tenable Network Security

CVE Not available
Agnitum Outpost Security Suite < 6.5.2358.316.0607 Detection Engine Bypass
PVS ID: 4604 FAMILY: Web Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote client is running the Agnitum Outpost security suite. This suite of tools protects
users from viruses, phishing attacks, malware and more. The observed version was: \n %L
\n\nThe vendor has reported an issue where specially formatted file names may bypass the
detection engines. An attacker exploiting this flaw would need to be able to convince an
Outpost user to open a malicious file. Successful exploitation would result in the attacker
bypassing the security rules and passing a malicious file to the client.
Solution: Upgrade to version 6.5.2358.316.0607 or higher.
CVE Not available
Mantis < 1.1.2 account_prefs_update.php language Parameter Traversal Local File Inclusion
PVS ID: 4605 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw.\n\nThe remote
host is running Mantis Bug Tracker version: '%L'\n\nThe version of Mantis Bug Tracker
installed on the remote host does not properly parse user-supplied data to the 'language'
parameter of the 'account_prefs_update.php' script. An attacker can gain 'read' access to
local files or execute arbitrary files that are already present on the web server. An attacker
exploiting this flaw would send a specially formatted 'language' parameter to the affected
script. This parameter would probably contain file names preceded by directory-traversal
strings.
Solution: Upgrade to version 1.1.2 or higher.
CVE-2008-3333
Retrospect Backup Client <
PVS ID: 4606 FAMILY: Generic
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:33561
Description: Synopsis : \n\nThe remote backup client is affected by multiple
vulnerabilities.\n\nAccording to its version number, the Retrospect Backup Client installed
on the remote host is affected by several vulnerabilities : \n\n - An error in the client may
lead to memory corruption and in turn a denial of service condition when processing
specially-crafted packets, although only when an English client is used on a Chinese
operating system, which is not a supported configuration.\n - The password hash is sent
over the network unencrypted, which could result in its disclosure.\n - A null pointer
dereference error may lead to a denial of service condition.\n\nThe reported version number
is: \n %L
Family Internet Services 1205