27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

CVE Not available<br />

Mac Outlook Client Version Detection<br />

<strong>PVS</strong> ID: 6566 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available<br />

Description: The remote host is running the Mac Outlook client version : %L .<br />

Solution: N/A<br />

CVE Not available<br />

Spiceworks Client Version Detection<br />

<strong>PVS</strong> ID: 6567 FAMILY: Internet Services RISK: INFO NESSUS ID:Not Available<br />

Description: The remote host is running the Spiceworks client version : %L . Spiceworks is a free<br />

software package used to manage network devices.<br />

Solution: N/A<br />

CVE Not available<br />

Asterisk Peer IAX2 Call Handling ACL Rule Bypass (AST-2012-013)<br />

<strong>PVS</strong> ID: 6568 FAMILY: Generic<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:61994<br />

Description: Synopsis :\n\nThe remote VoIP server is affected by a security bypass vulnerability.\n\nFor<br />

your information, the observed version of Asterisk is : \n %L \n\nAccording to the version<br />

in its SIP banner, the version of Asterisk running on the remote host is potentially affected<br />

by a vulnerability that could allow a remote, authenticated attacker to bypass access<br />

controls on out-bound calls.\n\nInter-Asterisk eXchange (IAX2) out-bound call restrictions<br />

can be bypassed if peer credentials, defined in a dynamic Asterisk Realtime Architecture<br />

(ARA) backend, are used by an attacker.<br />

Solution: Upgrade to Asterisk 1.8.15.1 / 10.7.1 or apply the patches listed in the Asterisk advisory<br />

CVE-2012-4737<br />

Foursquare app on an Android mobile device<br />

<strong>PVS</strong> ID: 6569 FAMILY: Internet Services RISK: INFO NESSUS ID:Not Available<br />

Description: The remote Android mobile device is running the Foursquare app. Foursquare is a free app<br />

used to share and save places you visit.<br />

Solution: Ensure that such usage is in aligment with Corporate policy<br />

CVE Not available<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

Family Internet Services 1797

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!