(PVS) Signatures - Tenable Network Security

PVS ID: 1919 FAMILY: Backdoors RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software which should be authorized by corporate
policy.\n\nA SETI@HOME client appears to be running on this port. This program may be
used by malicious users to get your system information (processor type and the operating
system). SETI@HOME client versions prior to 3.08 are vulnerable to a buffer overflow
attack.
Solution: Uninstall the program if it is not necessary.
CVE Not available
WinGate Telnet Proxy Server Detection
PVS ID: 1920 FAMILY: Backdoors
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running an inherently insecure protocol or
application.\n\nThe remote host is running a Wingate Telnet Proxy server. If not configured
securely, a Wingate Telnet Proxy server may be used by hackers to conceal their true
origins by bouncing conections through these proxies.
Solution: Uninstall the server if not necessary; otherwise ensure connections to the proxy are only
made by trusted hosts.
CVE-1999-0441
GnoCatan Remote Overflow
PVS ID: 1921 FAMILY: Backdoors RISK: HIGH NESSUS ID:11736
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running GnoCatan, a game server for the GNOME environment. There is a buffer overflow
in this service that may allow a remote attacker to gain a shell on this host.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
NetBIOS Name Service Reply Information Disclosure
PVS ID: 1922 FAMILY: Generic
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:11830
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to disclose
memory.\n\nThe remote host is running a version of the NetBT name service which suffers
from a memory disclosure problem.\nAn attacker may send a special packet to the remote
NetBT name service, and the reply will contain random arbitrary data from the remote host
memory. This arbitrary data may be a fragment from the web page the remote user is
viewing, or something more serious like a cleartext password.\nAn attacker may use this
flaw to continuously 'poll' the content of the memory of the remote host and might be able
Family Internet Services 489