27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>PVS</strong> ID: 5127 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available<br />

Description: The remote host is running an IIS 7.0 web server<br />

Solution: N/A<br />

CVE Not available<br />

MS09-036: Vulnerability in ASP.NET in Microsoft Windows Could Allow Denial of Service (970957)<br />

<strong>PVS</strong> ID: 5128 FAMILY: Web Servers<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:40555<br />

Description: Synopsis :\n\nThe remote .Net Framework is susceptible to a denial of service<br />

attack\n\nThe remote host is running a version of the .NET Framework component of<br />

Microsoft Windows that is suspectible to a denial of service attack due to the way<br />

ASP.NET manages request scheduling. Using specially crafted anonymous HTTP requests,<br />

an anonymous remote attacker can cause the web server to become unresponsive until the<br />

associated application pool is restarted. Note that the vulnerable code in the .NET<br />

Framework is exposed only through IIS 7.0 when operating in integrated mode. \nIAVB<br />

Reference : 2009-B-0036\nSTIG Finding Severity : Category I<br />

Solution: Microsoft has released a set of patches for .NET Framework 2.0 and 3.5<br />

CVE-2009-1536<br />

Microsoft SQL Client Detection<br />

<strong>PVS</strong> ID: 5129 FAMILY: Database<br />

Description: Detects Microsoft SQL clients.<br />

Solution: N/A<br />

CVE Not available<br />

Curl < 7.19.6 Certificate Validation Bypass Vulnerability<br />

RISK: Risk<br />

not available<br />

NESSUS ID:Not Available<br />

<strong>PVS</strong> ID: 5130 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available<br />

Description: Synopsis : \n\nThe remote host may be affected by a security bypass vulnerability.\n\nThe<br />

remote host is running Curl, a download client for various protocols. This version of Curl<br />

reportedly fails to properly validate the domain name in a signed CA certificate because the<br />

application stops reading the domain name when it encounters a NULL character. An<br />

attacker can exploit this by obtaining a legitimate certificate for a subdomain that contains a<br />

NULL character. This issue only affects Curl when it is compiled against OpenSSL. For<br />

your information, the reported version of Curl is: \n %L<br />

Solution: Upgrade to Curl version 7.19.6<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

Family Internet Services 1362

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!