(PVS) Signatures - Tenable Network Security

PVS ID: 6492 FAMILY: Backdoors RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is infected with a backdoor\n\nThe remote host appears to
be infected with the Flame worm. This worm uses a multitude of exploit modules to gather
information and exploit local machines.
realtime
Solution: The machine must be manually cleaned
CVE Not available
Game - Smurf's Village Detected
PVS ID: 6493 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote host is accessing the Smurf's Village game.
Solution: Ensure this application meets corporate guidelines for employee use.
CVE Not available
PHP 5.3.x < 5.3.13 CGI Query String Code Execution
PVS ID: 6494 FAMILY: Web Servers RISK: HIGH NESSUS ID:59088
Description: Synopsis :\n\nThe remote web server uses a version of PHP that is affected by a code
execution vulnerability.\n\nFor your information, the version of PHP installed on the
remote host is :\n %L \n\nPHP versions earlier than 5.3.13 are affected by a code execution
vulnerability.\n\n The fix for CVE-2012-1823 does not completely correct the CGI query
vulnerability. Disclosure of PHP source code and code execution via query paramenters are
still possible.\n\nNote that his vulnerability is exploitable only when PHP is used by
CGI-based configurations. Apache with 'mod-php' is not an exploitable configuration.
Solution: Upgrade to PHP version 5.3.13 or later.
CVE-2012-2336
PHP 5.3.x < 5.4.3 Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 6495 FAMILY: Web Servers RISK: HIGH NESSUS ID:58988
Description: Synopsis :\n\nThe remote web server uses a version of PHP that is affected by a code
execution vulnerability.\n\nFor your information, the version of PHP installed on the
remote host is :\n %L \n\nPHP versions earlier than 5.4.3 are affected by the following
vulnerabilities.\n\n - The fix for CVE-2012-1823 does not completely correct the CGI
query parameter vulnerability. Disclosure of PHP source code and code execution via query
paramenters are still possible. Note that his vulnerability is exploitable only when PHP is
used by CGI-based configurations. Apache with 'mod-php' is not an exploitable
configuration. (CVE-2012-2311, CVE-2012-2335, CVE-2012-2336)\n\n - An unspecified
buffer overflow exists related to the function 'apache_request_headers'. (CVE-2012-2329)
Family Internet Services 1773