27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Description: The remote host responds to SNMP v3 queries. It is likely that the host is configured for<br />

remote administration.<br />

Solution: Ensure that the instance of SNMP is configured within corporate standards and security<br />

policies.<br />

CVE Not available<br />

SQL Server Cleartext 'sa' Account 'NULL' Password Authentication<br />

<strong>PVS</strong> ID: 1121 FAMILY: Database RISK: HIGH NESSUS ID:10862<br />

Description: Synopsis :\n\nThe remote database has set the Administrator password to NULL\n\nThe<br />

remote SQL server allows logins with the 'sa' password set to NULL<br />

Solution: Require the SQL server to utilize an encrypted login and ensure that passwords are not<br />

trivially guessed.<br />

CVE Not available<br />

SQL Server Cleartext 'sa' Account 'sa' Password Authentication<br />

<strong>PVS</strong> ID: 1122 FAMILY: Database RISK: HIGH NESSUS ID:10862<br />

Description: Synopsis :\n\nThe remote database is configured with easily guessed (or default)<br />

Administrative passwords\n\nThe remote SQL server allows logins with the 'sa' password<br />

set to 'sa'<br />

Solution: Require the SQL server to utilize an encrypted login and ensure that passwords are not<br />

trivially guessed.<br />

CVE Not available<br />

SQL Server Cleartext 'sa' Account 'password' Password Authentication<br />

<strong>PVS</strong> ID: 1123 FAMILY: Database RISK: HIGH NESSUS ID:10862<br />

Description: Synopsis :\n\nThe remote database is configured with easily guessed (or default)<br />

Administrative passwords\n\nThe remote SQL server allows logins with the 'sa' password<br />

set to 'password'<br />

Solution: Require the SQL server to utilize an encrypted login and ensure that passwords are not<br />

trivially guessed.<br />

CVE Not available<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

SQL Server Cleartext 'sa' Account 'administrator' Password Authentication<br />

<strong>PVS</strong> ID: 1124 FAMILY: Database RISK: HIGH NESSUS ID:10862<br />

Family Internet Services 286

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!