(PVS) Signatures - Tenable Network Security

Solution: N/A
CVE Not available
ActiveX Control Detection
PVS ID: 4669 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Description: The remote web server is hosting content that includes an embedded call to ActiveX. The
CLSID of the ActiveX control is: \n %L >\n\nThe control is referenced at the following
location: \n%P
Solution: N/A
realtimeonly
CVE Not available
Trojan/Backdoor - Potential Malicious Microsoft Executable Being Served
PVS ID: 4670 FAMILY: Generic RISK: HIGH NESSUS ID:33950
Description: Synopsis :\n\nThe remote host may be compromised.\n\nThis service appears to send a
Microsoft Windows executable when a connection to it is established. This may be
evidence of a type of malware that is known to propagate in this manner.
realtime
Solution: Check the host and disinfect or reinstall if necessary.
CVE Not available
Possible Social Security Number in Cookie
PVS ID: 4671 FAMILY: Data Leakage RISK: INFO NESSUS ID:Not Available
Description: The remote web server sent a cookie with what appears to be an embedded Social
Security Number. You should manually verify that confidential data is not being
leaked from the network. The observed cookie was set to: \n %L \n\nThe request that
generated the cookie was: \n%P
Solution: Ensure that confidential data is not passed within plaintext cookies. Note: PVS only reports
on the first occurence of this item on a web server. Parse your entire web source for similar
occurrences.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Possible User ID and Password Sent Within a Web Form (POST)
PVS ID: 4672 FAMILY: Data Leakage RISK: INFO NESSUS ID:Not Available
Family Internet Services 1225