27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Description: A chargen server is running on this port.<br />

Solution: N/A<br />

CVE Not available<br />

Chargen Server Detection (UDP)<br />

<strong>PVS</strong> ID: 1905 FAMILY: Generic<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:Not Available<br />

Description: Synopsis :\n\nThe remote host may be used to attack other hosts.\n\nA chargen server is<br />

running on this port on top of UDP. An attacker may use spoofed UDP packets to use this<br />

server to set up a 'ping pong' attack that would use this service to attack a third party host.<br />

Solution: Disable the service.<br />

DHCP Server Detection<br />

CVE Not available<br />

<strong>PVS</strong> ID: 1906 FAMILY: Generic RISK: LOW NESSUS ID:Not Available<br />

Description: A DHCP server is running on this host.<br />

Solution: N/A<br />

CVE Not available<br />

DHCP Server Multiple Vulnerabilities<br />

<strong>PVS</strong> ID: 1907 FAMILY: Generic RISK: INFO NESSUS ID:Not Available<br />

Description: The remote host is running a DHCP server. If it is ISC-DHCP, there might be several flaws<br />

in it that may allow an attacker to gain a root shell on this host.<br />

Solution: Upgrade to latest version of ISC-DHCP.<br />

CVE-2004-1006<br />

MySQL < 3.23.55 Double Free() Overflow<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

<strong>PVS</strong> ID: 1908 FAMILY: Database RISK: HIGH NESSUS ID:11299<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is<br />

running a version of MySQL which is older than version 3.23.55. If you have not patched<br />

this version, then any attacker with a valid username may crash this service remotely by<br />

exploiting a double free bug.\n Further exploitation to gain a shell on the host may also be<br />

possible.<br />

Family Internet Services 485

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!