(PVS) Signatures - Tenable Network Security

Solution: Upgrade to MySQL 3.23.55 or higher.
CVE-2003-0073
ClarkConnect Linux clarkconnectd Information Disclosure
PVS ID: 1909 FAMILY: Backdoors
RISK:
MEDIUM
NESSUS ID:11277
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw which allows attackers to retrieve
sensitive files or data.\n\nThe daemon 'clarkconnectd' seems to be running on this port.
This daemon can provide sensitive information to attackers, such as the list of running
processes, the content of /var/log/messages, the snort log file and more. An attacker may
use it to gain more knowledge about this host.
Solution: No solution is known at this time.
CVE-2003-1379
Trojan/Backdoor - DeepThroat Detection
PVS ID: 1910 FAMILY: Backdoors RISK: HIGH NESSUS ID:10053
Description: Synopsis :\n\nThe remote host has a backdoor installed.\n\nDeepThroat is installed on the
remote host. This backdoor allows anyone to partially take the control of the remote
system. An attacker may use it to steal your password or prevent your computer from
working properly.
Solution: Use RegEdit, and find 'SystemDLL32' in
HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Run. The value's data is the path
of the file. If you are infected by DeepThroat 2 or 3, then the registry value is named
'SystemTray'.
CVE Not available
Trojan/Backdoor - NetSphere Detection
PVS ID: 1911 FAMILY: Backdoors RISK: HIGH NESSUS ID:10005
Description: Synopsis :\n\nThe remote host has a backdoor installed.\n\nNetSphere is installed. This
backdoor allows anyone to partially take control of the remote system. An attacker may use
this vulnerability to steal your password or prevent your system from working properly.
Solution: Telnet to this computer on TCP port 30100 and type : '', without the quotes,
and press Enter. This will stop the NetSphere service. Manually inspect and repair this
system.
CVE Not available
Trojan/Backdoor - GateCrasher Detection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 486