(PVS) Signatures - Tenable Network Security

to obtain sensitive information.
Solution: Contact the vendor for a patch or disable NetBIOS over TCP if it is not required.
CVE-2003-0661
TLSv1 Negotiation Detection
PVS ID: 1923 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The server on this port is tunneling traffic through TLSv1.
Solution: N/A
Citrix Server Detection
CVE Not available
PVS ID: 1924 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:10942
Description: A Citrix server is running on this machine. Citrix servers allow a Windows user to remotely
obtain a graphical login (and therefore act as a local user on the remote host). If an attacker
gains a valid login and password, he may be able to use this service to gain further access
on the remote host.
Solution: Disable this service if you do not use it. Ensure that strong encryption is being used.
CVE Not available
Windows Update Traffic Detection
PVS ID: 1925 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is enabled and utilizing Microsoft Windows Update. This service
allows users to check for missing updates and initiate remediation via the Microsoft
update site. Depending on your individual policy, this may or may not be a desirable
action.
Solution: Ensure that Windows Update utilization is a valid use of company resources.
CVE Not available
Generic Shell Detection (HP-UX Telnet)
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 1926 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running an inherently insecure protocol or
application.\n\nAn HP-UX shell server was noted on the host. Typically, shells are used by
remote users to manage operating systems. Shells that pass traffic in plaintext introduce a
risk to confidentiality and privacy. In addition, many shells are used by malicious
Family Internet Services 490