27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Description: Synopsis :\n\nThe remote host has a backdoor installed.\n\nThe remote host has<br />

the backdoor '4553' installed. This implies that this host has probably been<br />

compromised.<br />

Solution: Complete reinstallation of host.<br />

CVE Not available<br />

RemotelyAnywhere SSH Detection<br />

<strong>PVS</strong> ID: 1884 FAMILY: Backdoors RISK: LOW NESSUS ID:10921<br />

Description: The remote host is running a RemotelyAnywhere SSH server on this port. Make sure this<br />

software has been installed legitimately, as it is a tool of choice to many attackers,<br />

according to NAVCIRT.<br />

Solution: N/A<br />

CVE Not available<br />

RemotelyAnywhere WWW Detection<br />

<strong>PVS</strong> ID: 1885 FAMILY: Backdoors RISK: LOW NESSUS ID:10920<br />

Description: The remote host is running a RemotelyAnywhere web server on this port. Make sure this<br />

software has been installed legitimately, as it is a tool of choice to many attackers,<br />

according to NAVCIRT.<br />

Solution: N/A<br />

CVE Not available<br />

Apple Airport Administrative Port Credential Encryption Weakness<br />

<strong>PVS</strong> ID: 1886 FAMILY: Generic RISK: HIGH NESSUS ID:11620<br />

Description: Synopsis :\n\nThe remote host passes information across the network in an insecure<br />

manner.\n\nThe remote host is an Apple Airport Wireless Access Point, which can be<br />

administrated on top of port 5009. There is a flaw in the administration protocol of this<br />

device which makes its password to be transmitted in cleartext over the network. An<br />

attacker could sniff this information, recover the password, and use it to gain administrative<br />

privileges on this host.<br />

Solution: Block incoming traffic to this port, and only administer this device via a cross-over cable.<br />

CVE-2003-0270<br />

LeafNode < 1.9.30 Resource Exhaustion DoS<br />

<strong>PVS</strong> ID: 1887 FAMILY: Generic<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

RISK:<br />

MEDIUM<br />

NESSUS ID:Not Available<br />

Family Internet Services 480

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!