(PVS) Signatures - Tenable Network Security

Solution: Upgrade to Android 2.3.6 or later.
CVE-2011-4276
PCAnywhere Detection
PVS ID: 6298 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running PCAnywhere, an application that allows remote users to
connect to a Windows desktop and work remotely.
Solution: Ensure that you are running the latest version of PCAnywhere.
CVE Not available
Samba 3.6.x < 3.6.3 Denial of Service
PVS ID: 6299 FAMILY: Samba
RISK:
MEDIUM
NESSUS ID:57752
Description: Synopsis :\n\nThe remote Samba server is affected by a denial of service
vulnerability.\n\nFor your information, the observed version of Samba is :\n %L
\n\nAccording to its banner, the version of Samba 3.6.x running on the remote host is
earlier than 3.6.3. Errors exist in the files 'source3/lib/substitute.c' and
'source3/smbd/server.c' that leak small amounts of memory when processing every
connection attempt.\n\nAn attacker can continually make connections to the server and
cause a denial of service attack against the affected smbd service.
Solution: Either apply one of the patches referenced in the project's advisory or upgrade to 3.6.3 or
later.
CVE-2012-0817
OpenSSH < 5.7 Multiple Vulnerabilities
PVS ID: 6300 FAMILY: SSH
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:44081
Description: Synopsis :\n\nThe remote SSH service may be affected by multiple vulnerabilities.\n\nFor
your information, the observed version of OpenSSH installed on the remote host is : \n %L
\n\nVersions of OpenSSH server before 5.7 may be affected by the following
vulnerabilities :\n\n - A security bypass vulnerability because OpenSSH does not properly
validate the public parameters in the J-PAKE protocol. This could allow an attacker to
authenticate without the shared secret. Note that this issue is only exploitable when
OpenSSH is built with J-PAKE support, which is currently experimental and disabled by
default. (CVE-2010-4478)\n\n - The auth_parse options function in auth-options.c in sshd
provides debug messages containing authorized_keys command options, which allows
remote authenticated users to obtain potentially sensitive information by reading these
messages. (CVE-2012-0841)
Solution: Upgrade to OpenSSH version 5.7 or later.
Family Internet Services 1719