(PVS) Signatures - Tenable Network Security

CVE Not available
SMTP Server Inbound .exe Attachment Detection
PVS ID: 1173 FAMILY: SMTP Servers RISK: LOW NESSUS ID:Not Available
Description: PVS has noted an inbound mail message that contained a .exe attachment. CAVEAT: PVS
was not able to determine whether or not the SMTP server actually processed the email
message.
Solution: If applicable, block incoming .exe attachments. Ensure antivirus and malware
detection is deployed.
TFTP Server Detection
CVE Not available
PVS ID: 1174 FAMILY: FTP Servers RISK: NONE NESSUS ID:11819
Description: The remote host is running a TFTPD server. This server allows for unauthenticated file
transfer to and from the host.
Solution: If you do not require this TFTP service, disable it.
CVE Not available
TYPSoft FTP Server < 1.11 Invalid Path Request DoS
PVS ID: 1175 FAMILY: FTP Servers RISK: HIGH NESSUS ID:12075
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack\n\nThe
remote host seems to be running TYPSoft FTP 1.10 or earlier. TYPESoft FTP Server is
prone to a remote denial of service vulnerability that may allow an attacker to cause the
server to crash.
Solution: Upgrade to version 1.11 or later.
CVE-2004-0325
Windows NT FTP Server (WFTP) Pro Server < 3.21 Multiple Vulnerabilities
PVS ID: 1176 FAMILY: FTP Servers RISK: HIGH NESSUS ID:12083
Description: Synopsis :\n\nThe remote host is vulnerable to multiple issues\n\nThe remote server is
running a potentially vulnerable version of WFTPD. There are at least one remote
stack-based buffer overflows and two remote Denial of Service (DoS) attacks that WFTPD
is vulnerable to.
Solution: Upgrade to WFTP 3.21 or later.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 299