(PVS) Signatures - Tenable Network Security

Solution: If not required, disable the game server.
CVE Not available
Trojan/Backdoor - PhatBOT Detection
PVS ID: 1202 FAMILY: Generic RISK: HIGH NESSUS ID:12111
Description: Synopsis :\n\nThe remote host can be remotely controlled by a malicious user\n\nThe
remote systems appears to have PhatBOT installed. This program allows the machine to be
controlled via a P2P network. PhatBOT is extremely sophisticated and allows the remote
attacker to use the victim machine to perform various actions.
Solution: Remove the trojan software from the infected machine and consider re-installing the
operating system.
CVE Not available
Policy - HALO Internet Gaming Client Detection
PVS ID: 1203 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running client software which may be considered
questionable\n\nThe remote client is playing the Internet-based action game, HALO.
HALO is a game wherein users from across the Internet can play against each other via
central Internet servers.
Solution: Ensure that this gaming is in alignment with corporate and security policies.
CVE Not available
Policy - BattleField 1942 Gaming Client Detection
PVS ID: 1204 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running client software which may be considered
questionable\n\nThe remote client is running a 'BattleField 1942' network game.
Solution: Ensure that this gaming is in alignment with corporate and security policies.
CVE Not available
Apache HTTP Server < 2.0.49 mod_ssl Plain HTTP Request DoS
PVS ID: 1205 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:12100
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack\n\nThe
remote host appears to be running a version of Apache 2.x which is older than 2.0.49.
There is a bug in the mod_ssl module that ships with Apache 2.0.35 to 2.0.48 that makes it
vulnerable to a remote denial of service. An attacker may exploit this flaw by issuing
Family Internet Services 306