(PVS) Signatures - Tenable Network Security

Description: The remote host is running Microsoft Windows version: %L
Solution: N/A
Spotify Installed
CVE Not available
PVS ID: 6128 FAMILY: Internet Services RISK: INFO NESSUS ID:Not Available
Description: The remote host has attempted to installed the Spotify music application.
Solution: N/A
CVE Not available
OpenSSL 0.9.8 < 0.9.8s / 1.x < 1.0.0f Multiple Vulnerabilities
PVS ID: 6129 FAMILY: Web Servers RISK: HIGH NESSUS ID:57460
Description: Synopsis :\n\nThe remote web server is affected by multiple vulnerabilities.\n\nFor your
information, the observed version of OpenSSL is : \n %L \n\nVersions of OpenSSL 0.9.8
earlier than 0.9.8s, and 1.0.0 earlier than 1.0.0f are potentially affected by the following
vulnerabilities :\n\n - An extension of the Vaudenay padding oracle attack exists against
CBC mode encryption which enables an efficient plaintext recovery attack against the
OpenSSL implementation of DTLS. (CVE-2011-4108)\n\n - If
x509_V_FLAG_POLICY_CHECK is set in OpenSSL 0.9.8, then a policy check failure can
lead to a double-free. (CVE-2011-4109)\n\n - OpenSSL fails to clear the bytes used as
block cipher padding in SSL 3.0 records. As a result, in each record, up to 15 bytes of
uninitialized memory may be sent, encrypted, to the SSL peer. (CVE-2011-4576)\n\n -
RFC 3779 data can be included in certificates, and if it is malformed, may trigger an
assertion failure. This could be used in a denial-of-service attack. (CVE-2011-4577)\n\n -
Support for handshake restarts for server gated cryptography (SGC) can be used in a
denial-of-service attack. (CVE-2011-4619)\n\n - A malicious TLS client can send an
invalid set of GOST parameters which will cause the server to crash due to a lack of error
checking. (CVE-2012-0027)
Solution: Upgrade to OpenSSL 0.9.8s, 1.0.0f, or later.
CVE-2012-0027
Successful Shell Attack Detected - Linux Failed 'cd' Command
PVS ID: 6130 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: The results of a failed 'cd' command occurred in a TCP session normally used for a
standard service. This may indicate a successful compromise of this service has occurred.
realtimeonly
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1673