(PVS) Signatures - Tenable Network Security

CVE-2003-0963
Symantec Antivirus LiveUpdate Local Privilege Escalation
PVS ID: 1137 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running an instance of Symantec Anti-virus. The host is also
configured to automatically update virus signatures via LiveUPDATE. Depending
on the version, this may allow a local user to gain elevated privileges.
Solution: Larger companies will wish to distribute virus pattern files via a central, internal
update site. For large companies, individual users accessing Internet updates will tend
to decrease bandwidth and cause undue congestion on the network.
CVE-2003-0994
Policy - SETI@HOME Client Detection
PVS ID: 1138 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running client software which may be considered
questionable.\n\nThe remote client is running the SETI@HOME application which is used
to maximize spare CPU cycles within a workstation in order to Search for Extra Terrestrial
Intelligence. While it does not usually interfere with operations on the local machine, it has
the possibility of taking up bandwidth while downloading work updates.
Solution: Ensure that the application is allowed within your environment.
CVE Not available
SHOUTcast Media Server Detection
PVS ID: 1139 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: The remote server is running the SHOUTcast media server: %L
Solution: Ensure that this instance of SHOUTcast meets corporate and security guidelines.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Elm frm Command Mail Subject Line Handling Remote Overflow
PVS ID: 1140 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running Elm 2.5.6 or older, which contains a buffer overflow which might be triggered
remotely. To exploit it, an attacker would need to send a malicious email to a user of this
hosts.
Solution: Upgrade to the latest version of Elm (available at http://www.instinct.org/elm).
Family Internet Services 290