(PVS) Signatures - Tenable Network Security

Description: The remote host is running GoToMyPC, a remote administration tool that allows access to
a PC. This software uses a backchannel (viewed as an outgoing connection by your
firewall) to communicate with the vendor's computers that then broker a connection back to
the remote client accessing this computer.
realtimeonly
Solution: Verify that this conforms to your security policy.
CVE Not available
Winamp < 5.622 Multiple Vulnerabilities
PVS ID: 6056 FAMILY: Generic RISK: HIGH NESSUS ID:56681
Description: Synopsis : \n\nThe remote host has a media player installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running Winamp, a media player for Windows. For
your information, the observed version of Winamp is : \n %L \n\nVersions of Winamp
earlier than 5.622 are potentially affected by the following overflow vulnerabilities : \n\n -
A heap-based buffer overflow exists in the plugin in_midi.dll when processing the
iOffsetMusic value in the Creative Music Format (CMF) header.\n\n - A heap-based buffer
overflow exists in the plugin in_mod.dll when processing the channels value in the
Advanced Module Format (AMF) header.\n\n - A heap-based buffer overflow exists in the
plugin in_nsv.dll when processing the toc_alloc value in the Nullsoft Streaming Video
(NSF) header.\n\n - Integer overflow errors exist in the TSCC RGB and YUV decoders.
Solution: Upgrade to Winamp 5.622 or later.
CVE Not available
Novell Messenger Server < 2.2.1 Memory Information Disclosure
PVS ID: 6057 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:56691
Description: Synopsis : \n\nThe remote host has an instant messaging server product installed that is
affected by an information disclosure vulnerability.\n\nThe remote host is running Novell
Messenger Server, formerly Groupwise Messenger, an instant messaging server
application. For your information, the observed version of Novell Messenger Server is : \n
%L \n\nVersions of Novell Messenger Server earlier than 2.2.1 are potentially affected by
an information disclosure vulnerability whereby a remote, unauthenticated attacker could
send commands that would force the Messenger server process to return the contents of
arbitrary memory locations. This data could potentially include strings containing the
credentials used by Messenger to authenticate to directory services.
Solution: Upgrade to Novell Messenger 2.2.1 or later.
CVE-2011-3179
TimThumb Application Detection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1655