(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host is vulnerable to a privilege escalation attack.\n\nThe remote
host is running Sun Java System Identity Manager 8.1 with Patch 5 or 6. Such versions are
potentially affected by a privileges escalation vulnerability when it is configured with Sun
Java System Access Manager, OpenSSO Enterprise 8.0, or IBM Tivoli Access Manager.
An attacker, exploiting this flaw, could gain administrative privileges on the affected
application. For your information, the observed version of Sun Java System Identity
Manager is: \n %L
Solution: Apply Patch 7 from the Sun reference.
CVE-2010-0311
phpMyAdmin < 2.11.10 Multiple Vulnerabilities
PVS ID: 5304 FAMILY: CGI RISK: HIGH NESSUS ID:44324
Description: Synopsis : \n\nThe remote web server contains a PHP application that is vulnerable to
multiple attack vectors.\n\nThe remote web server is running a version of phpMyAdmin
earlier than 2.11.10. Such versions are potentially affected by multiple vulnerabilities : \n\n
- A cross-site request forgery attack because the application uses the 'unserialize()' PHP
function on potentially unsafe data in the setup script.(CVE-2009-4605)\n\n - An insecure
file creation and deletion vulnerability due to the way phpMyAdmin creates temporary
files.\n\nFor your information, the observed version of phpMyAdmin is: \n %L
Solution: Upgrade to phpMyAdmin 2.11.10, 3.0.0, or later.
CVE-2009-4605
Windows-Vista VPN Detection
PVS ID: 5305 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running the Windows-Vista VPN Server. A VPN (Virtual
Private Network) allows remote users to connect to an internal network as if they
were local users. A VPN which allows split-tunneling will essentially serve as a
bridge between the remote network and the internal network. Special care should
be taken to ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of Risk to the internal computing environment.
Solution: Ensure that the VPN is acceptable with respect to Corporate Guidelines and Policies.
CVE Not available
Dead Peer Detection v1.0 VPN Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5306 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running the Dead Peer Detection v1.0 VPN Server. A VPN (Virtual
Private Network) allows remote users to connect to an internal network as if they were
local users. A VPN which allows split-tunneling will essentially serve as a bridge between
the remote network and the internal network. Special care should be taken to ensure that
Family Internet Services 1418