(PVS) Signatures - Tenable Network Security

Trojan/Backdoor Detection - Conficker Detection
PVS ID: 4977 FAMILY: Backdoors RISK: HIGH NESSUS ID:36036
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host seems to be infected by the Conficker worm. This worm has
several capabilities that allow an attacker to execute arbitrary code on the remote operating
system. The remote host might also be attempting to propagate the worm to third-party
hosts.
realtime
Solution: Update your antivirus and perform a full scan of the remote operating system.
CVE Not available
Trojan/Backdoor Detection - Conficker Detection
PVS ID: 4978 FAMILY: Backdoors RISK: HIGH NESSUS ID:36036
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'backdoor'
program.\n\nThe remote host seems to be infected by the Conficker worm. This worm has
several capabilities that allow an attacker to execute arbitrary code on the remote operating
system. The remote host might also be attempting to propagate the worm to third-party
hosts.
realtime
Solution: Update your antivirus and perform a full scan of the remote operating system.
CVE Not available
Serv-U < 8.0.0.1 Multiple Vulnerabilities (DoS, Traversal)
PVS ID: 4979 FAMILY: FTP Servers RISK: HIGH NESSUS ID:36035
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Serv-U File Server, an FTP server for Windows. The reported version is: \n %L
\n\nThis version of Serv-U is earlier than 8.0.0.1 and is reportedly affected by the following
issues : \n\n - A directory traversal vulnerability enables an authenticated remote attacker to
create directories outside his or her home directory. (CVE-2009-1031)\n\n - An
authenticated remote attacker can cause the FTP service to become saturated for a long
period of time using a long series of 'SMNT' commands without an argument. During this
time, new connections would not be allowed. (CVE-2009-0967)
Solution: Upgrade to version 8.0.0.1 or higher.
CVE-2009-1031
Firefox < 3.0.8 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1315