(PVS) Signatures - Tenable Network Security

CVE Not available
Policy - Cydoor Topicks Sofware Detection
PVS ID: 1236 FAMILY: Backdoors RISK: INFO NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running client software which may be considered
questionable\n\nThe remote host is using the Cydoor Topicks program. You should ensure
that the user intended to install Cydoor (it is sometimes silently installed) and that the use
of Cydoor matches your corporate mandates and security policies.
Solution: Manually uninstall the software.
CVE Not available
Apache Input Header Folding Remote DoS
PVS ID: 1237 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:12293
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack\n\nThe
remote host appears to be running a version of Apache 2.x that is older than 2.0.50. There is
denial of service in Apache httpd 2.0.x by sending a specially crafted HTTP request. It is
possible to consume arbitrary amounts of memory. On 64 bit systems with more than 4GB
virtual memory this may lead to heap based buffer overflow.
Solution: Upgrade to most recent version of Apache.
CVE-2004-0493
Trojan/Backdoor - Apache mod_rootme Detection
PVS ID: 1238 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host has been compromised and is running a 'Backdoor'
program\n\nThe remote system appears to be running the mod_rootme module, this module
silently allows a user to gain root shell access to the machine via crafted HTTP requests.
Solution: - Remove the mod_rootme module from httpd.conf/modules.conf. Consider reinstalling the
computer, as it is likely to have been compromised by an intruder
CVE Not available
Mozilla < 1.7 Multiple Remote Overflows
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1239 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote browser is vulnerable to multiple flaws\n\nThe remote
host is using the Mozilla web browser prior to version 1.7. There are several flaws
within this version of Mozilla that include a remote overflow via a spoofed address
bar, an overflow in the SSL certificate store, and other serious issues.
Family Internet Services 315