(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is configured with default or easily-guessed
credentials\n\nThe remote SQL server allows logins with the 'admin' password set to
'password'
Solution: Require the SQL server to utilize an encrypted login and ensure that passwords are not
trivially guessed.
CVE Not available
Web Server SSLv3 Detection
PVS ID: 1133 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: The web server on this port is tunneling traffic through SSL version 3.
Solution: N/A
CVE Not available
Web Server SSLv2 Detection
PVS ID: 1134 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: The server on this port is tunneling traffic through SSL version 2.
Solution: N/A
CVE Not available
Web Server SSLv1 Detection
PVS ID: 1135 FAMILY: Web Servers
RISK:
MEDIUM
Description: The server on this port is tunneling traffic through SSL version 1.
Solution: Disable SSLv1 in favor of stronger encryption such as TLSv1 or SSLv3.
CVE Not available
lftp HTTP Directory Name Handling Remote Overflow
NESSUS ID:Not Available
PVS ID: 1136 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe client is using a
version of lftp less than 2.6.10. This version is vulnerable to a remote buffer overflow from
a malicious server.
Solution: Upgrade to version 2.6.10 or later.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 289