(PVS) Signatures - Tenable Network Security

CVE-2004-0189
Oracle Application Server Web Cache Multiple Vulnerabilities
PVS ID: 1213 FAMILY: Web Servers RISK: HIGH NESSUS ID:12126
Description: Synopsis :\n\nThe remote host is vulnerable to a heap overflow\n\nThe remote host is
running a version of Oracle Application Server Web Cache version 9.0.4.0 or older. There
is a heap overflow condition in this version of the software, that may allow an attacker to
execute arbitrary code on this host. In addition, there is an unspecified issue with client
request handling.
Solution: See http://otn.oracle.com/deploy/security/pdf/2004alert66.pdf for vendor patch information.
CVE-2004-0385
RealNetworks Helix Universal Server < 9.0.3 HTTP GET Request DoS
PVS ID: 1214 FAMILY: Generic RISK: HIGH NESSUS ID:12210
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack\n\nHelix
Universal Server versions prior to 9.0.3 are vulnerable to a trivial remote Denial of Service
(DoS) attack. By sending a malformed HTTP GET request, an unauthenticated attacker can
crash the service.
Solution: Upgrade to version 9.0.3 or higher.
CVE-2004-0389
Trojan/Backdoor Detection - Sasser Worm
PVS ID: 1215 FAMILY: Backdoors RISK: HIGH NESSUS ID:12219
Description: Synopsis :\n\nThe remote host has a backdoor installed\n\nThe remote host is
infected with the Sasser Worm. This worm utilizes a backdoor command server
and FTP server on ports 5554 and 9996, respectively.
realtime
Solution: Use an anti-virus product to remove the worm and consider re-installing the operating
system.
CVE Not available
rsync < 2.6.1 Traversal Arbitrary File Creation
PVS ID: 1216 FAMILY: Generic
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:12230
Family Internet Services 309