(PVS) Signatures - Tenable Network Security

Description: An FTP user successfully created a hidden directory. This may potentially be an attempt to
hide unauthorized data on the FTP server.
realtimeonly
Solution: Inspect and repair this vulnerability
CVE Not available
FTP Attack - File Hidden
PVS ID: 6215 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: An FTP user successfully renamed a file to a hidden name. This may potentially be an
attempt to hide unauthorized data on the FTP server.
realtimeonly
Solution: Inspect and repair this vulnerability
CVE Not available
FTP Attack - Passive Port Scan
PVS ID: 6216 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: An FTP user issued a successful passive port request which enumerated a port less than
1024, and other than 21 or 20. This may indicate that your FTP server is being used for port
scanning by hackers who wish to hide their identity or possibly mail spammers who are
looking for open port 25 devices.
realtimeonly
Solution: Inspect and repair this vulnerability
CVE Not available
FTP Attack - Successful SITE EXEC Command
PVS ID: 6217 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: An FTP user issued a successful SITE EXEC command. The SITE EXEC command is
often attempted by remote hackers to run UNIX and Windows commands directly on the
FTP server. This PVS rule detects a successful command execution, not an attempt.
realtimeonly
Solution: Disable the FTP service or restrict access to it.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1697