(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
CVE-2003-0099
PostgreSQL < 7.2.3 Multiple Vulnerabilities
PVS ID: 1892 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:11456
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw which allows for the bypassing of
authentication.\n\nThe remote PostgreSQL server is vulnerable to various flaws which may
allow an attacker who has the right to query the remote database to obtain a shell on this
host.
Solution: Upgrade to PostgreSQL 7.2.3 or higher.
CVE-2002-1399
PostgreSQL < 7.2.3 Multiple Vulnerabilities (2)
PVS ID: 1893 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:11456
Description: Synopsis :\n\nThe remote host can be tricked into giving a user a shell.\n\nThe remote
PostgreSQL server is vulnerable to various flaws which may allow an attacker who has the
right to query the remote database to obtain a shell on this host.
Solution: Upgrade to PostgreSQL 7.2.3 or higher.
CVE-2002-1398
Oracle 9iAS Administrative Web Interface Authentication Weakness
PVS ID: 1894 FAMILY: Web Servers RISK: HIGH NESSUS ID:11452
Description: The remote Oracle 9i Application Server administrative interface runs on this port. Make
sure that the access to this interface is restricted to the persons who are in charge of this
server.
Solution: Impose Access Control Lists (ACLs) on the administrative interface.
CVE-2002-0561
Passive Vulnerability Scanner (PVS) Signatures
McAfee ePolicy Orchestrator Remote Format String
PVS ID: 1895 FAMILY: Generic RISK: HIGH NESSUS ID:11409
Description: Synopsis :\n\nThe remote host is vulnerable to a remote 'format string' flaw.\n\nThe remote
server is running McAfee ePolicy Orchestrator. This service *might* be vulnerable to a
format string attack which may allow an attacker to execute arbitrary commands with the
SYSTEM privileges.
Family Internet Services 482