(PVS) Signatures - Tenable Network Security

malformed SSL commands when connecting to the remote host, and may therefore use it to
prevent HTTPS from working.
Solution: Upgrade to Apache/2.0.49 or later.
CVE-2004-0113
Courier < 0.45 Japanese Codeset Conversion Overflows
PVS ID: 1206 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:12102
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote mail server
is the Courier MTA. There is a buffer overflow in the Japanese codeset conversion
functions of this software that may allow an attacker to execute arbitrary code on this host.
Solution: Upgrade to Courier 0.45 or later.
CVE-2004-0224
Trojan/Backdoor - Agobot.FO Detection
PVS ID: 1207 FAMILY: Backdoors RISK: HIGH NESSUS ID:12128
Description: Synopsis :\n\nThe remote host has a backdoor installed\n\nThe remote host has the
Agobot.FO backdoor installed. This backdoor is known to scan local networks for
common Microsoft vulnerabilities, scan local networks for exploitable DameWare
systems, brute force local Microsoft machine User accounts, connect to an IRC
channel and setup a BOT for remote command execution.
Solution: This backdoor should be immediately removed from the infected systems and
manually cleaned.
CVE Not available
WU-FTPD < 2.6.3 Multiple Vulnerabilities
PVS ID: 1208 FAMILY: FTP Servers RISK: HIGH NESSUS ID:12098
Description: Synopsis :\n\nAn attacker may be able to access directories outside the FTP root\n\nThe
remote host is running wu-ftpd 2.6.2 or older. There is a bug in this version which may
allow an attacker to bypass the restricted-gid feature and gain unauthorized access to
otherwise restricted directories. In addition, this version is prone to a remote overflow in
the S/KEY authentication.
Solution: Upgrade to wu-ftpd 2.6.3 or later.
CVE-2004-0185
MetaSploit Framework Web Server Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1209 FAMILY: Web Servers RISK: INFO NESSUS ID:Not Available
Family Internet Services 307