(PVS) Signatures - Tenable Network Security

Solution: Upgrade to nginx 1.0.10 or later.
CVE-2011-4315
nginx < 1.0.14 / 1.1.x < 1.1.17 Information-Disclosure
PVS ID: 6457 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis:\n\nThe remote web server is affected by an information disclosure
vulnerability.\n\nThe remote host is running a nginx HTTP server. For your information,
the observed version of nginx is:\n %L \n\n Versions earlier than 1.0.14(stable version) or
versions earlier than 1.1.17(development version) are vulnerable to an
information-disclosure vulnerability, when handling specially crafted HTTP responses.
Attackers can exploit this issue to disclose the content of the previously freed memory.
(CVE-2012-1180)\n
Solution: Upgrade to nginx 1.0.14(stable version) or 1.1.17(development version) or later.
CVE-2012-1180
nginx < 1.0.15 / 1.1.x < 1.1.19 Buffer-Overflow Vulnerability
PVS ID: 6458 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis:\n\nThe remote web server is affected by a buffer-overflow vulnerability.\n\n The
remote host is running a nginx HTTP server. For your information, the observed version of
nginx is:\n %L \n\n Versions earlier than 1.0.15(stable version) or versions earlier than
1.1.19(development version) are vulnerable to a buffer-overflow vulnerability because it
fails to perform adequate checks on user-supplied input. An attacker can exploit this issue
by using a specially-crafted mp4 file, allowing the attacker to execute arbitrary code in the
context of the application. (CVE-2012-2089)\n
Solution: Upgrade to nginx 1.0.15(stable version) or 1.1.19(development version) or later.
TeamViewer Detection
CVE-2012-2089
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 6459 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote host is running TeamViewer, an application for managing machines remotely.
TeamViewer relies on the host computer (usually behind a firewall) initiating an outbound
connection. Given this, TeamViewer can subvert firewall rules by allowing direct access to
an internal machine from untrusted networks. The version of TeamViewer is %L
Solution: Ensure that this application is authorized for your network
Family Internet Services 1763