(PVS) Signatures - Tenable Network Security

Solution: Upgrade or patch according to vendor recommendations.
rsync Detection
CVE-2002-0690
PVS ID: 1896 FAMILY: Generic RISK: LOW NESSUS ID:11389
Description: The remote host is running rsync on this port.
Solution: N/A
CVE Not available
rsync < 2.5.2 Signedness Error Array Overflow
PVS ID: 1897 FAMILY: Generic RISK: HIGH NESSUS ID:11390
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote rsync
server might be vulnerable to an array index overflow. An attacker may use this flaw to
gain a shell on this host.
Solution: Upgrade to rsync 2.5.2 or higher.
CVS Server Detection
CVE-2002-0048
PVS ID: 1898 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote server is running the CVS daemon. The server is being used as a central file
repository for maintenance of file or package version.
Solution: Ensure that the server is operating under the guidelines as set forth by corporate and
security policies. Examine the possibility of securing the CVS session by using CVS over
SSH.
CVE Not available
CVS < 1.11.5 pserver Directory Request Double Free() Privilege Escalation
PVS ID: 1899 FAMILY: Generic RISK: HIGH NESSUS ID:11385
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote CVS
server is vulnerable to a double free() vulnerability that may allow an attacker to gain a
shell on this host.
Solution: Upgrade to CVS 1.11.5 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 483