27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>PVS</strong> ID: 6175 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available<br />

Description: A successful 'tethereal' command occurred in a TCP session normally used for a standard<br />

service.<br />

realtimeonly<br />

Solution: The command activity observed is indicative of a possible compromise. Consider<br />

performing a full audit of the system to investigate further.<br />

CVE Not available<br />

Successful Shell Attack Detected - Unix 'history' Command<br />

<strong>PVS</strong> ID: 6176 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available<br />

Description: A successful 'history' command occurred in a TCP session normally used for a standard<br />

service.<br />

realtimeonly<br />

Solution: The command activity observed is indicative of a possible compromise. Consider<br />

performing a full audit of the system to investigate further.<br />

CVE Not available<br />

Successful Shell Attack Detected - Windows 'copy' Command<br />

<strong>PVS</strong> ID: 6177 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available<br />

Description: The results of the Windows copy command occurred in a TCP session normally used for a<br />

standard service. This may indicate a successful compromise of this service has occurred.<br />

realtimeonly<br />

Solution: The command activity observed is indicative of a possible compromise. Consider<br />

performing a full audit of the system to investigate further.<br />

CVE Not available<br />

Successful Shell Attack Detected - Windows Failed 'cd' Command<br />

<strong>PVS</strong> ID: 6178 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available<br />

Description: The results of an unsuccessful attempt to change drives on a Windows machine occurred in<br />

a TCP session normally used for a standard service. This may indicate a successful<br />

compromise of this service has occurred.<br />

realtimeonly<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

Family Internet Services 1686

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!