(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote Samba server is affected multiple buffer overflow
vulnerabilities.\n\nFor your information, the observed version of Samba is :\n %L
\n\nAccording to its banner, the version of Samba 3.x running on the remote host is earlier
than 3.6.4 / 3.5.14 / 3.4.16. It is, therefore, affected by multiple heap-based buffer overflow
vulnerabilities.\n\nAn error in the DCE/RPC IDL (PIDL) compiler causes the RPC
handling code it generates to contain multiple heap-based buffer overflow vulnerabilities.
This generated code can allow a remote, unauthenticated attacker to use malicious RPC
calls to crash the application and possibly execute arbitrary code as the root user.
Solution: Either install the appropriate patch referenced in the project's advisory or upgrade to 3.4.16,
3.5.14, 3.6.4, or later.
CVE-2012-1182
RealWin Management Server Detection (SCADA)
PVS ID: 6444 FAMILY: SCADA RISK: INFO NESSUS ID:Not Available
Description: The remote server is running the RealWin Management Server. This software server is
used to manage a wide range of SCADA devices. A client has just attempted a
INFOTAG/SET_CONTROL command.
Solution: N/A
CVE Not available
ClearSCADA Management Server Detection (SCADA)
PVS ID: 6445 FAMILY: SCADA RISK: INFO NESSUS ID:Not Available
Description: The remote server is running the ClearSCADA Management Server. This software server is
used to manage a wide range of SCADA devices. The PVS has just observed a client
connection to this server.
Solution: N/A
CVE Not available
Wonderware Management Server Detection (SCADA)
PVS ID: 6446 FAMILY: SCADA RISK: INFO NESSUS ID:Not Available
Description: The remote server is running the Wonderware Management Server. This software server is
used to manage a wide range of SCADA devices. The PVS has just observed a client
connection to this server.
Solution: N/A
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1759