(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is running an inherently insecure protocol or
application.\n\nA Cisco shell server was noted on the host. Typically, shells are used by
remote users to manage operating systems. Shells that pass traffic in plaintext introduce a
risk to confidentiality and privacy. In addition, many shells are used by malicious
individuals as part of a Trojan program or remote buffer overflow exploit.
Solution: Ensure that the remote shell is secured against data leakage and that it is a valid, approved
means of managing the remote machine.
CVE Not available
Generic Shell Detection (MV/9600)
PVS ID: 1944 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: A shell server was noted on the host. Typically, shells are used by remote users to manage
operating systems. Shells which pass traffic in plaintext introduce a risk to confidentiality
and privacy. In addition, many shells are used by malicious individuals as part of a Trojan
program or remote buffer overflow exploit.
Solution: Ensure that the remote shell is secured against data leakage and that it is a valid, approved
means of managing the remote machine.
CVE Not available
Citrix MetaFrame Published Application Enumeration
PVS ID: 1945 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:11138
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote Citrix server is configured in such a way as to allow anonymous
remote users to enumerate services.
Solution: Contact Citrix for a workaround, patch, or configuration option to mitigate this risk
CVE Not available
LDAP NULL Base Connection
PVS ID: 1946 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:10722
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nImproperly configured LDAP servers will allow the directory BASE to be set to
NULL. This allows information to be obtained without any prior knowledge of the
directory structure. Coupled with a NULL BIND, an anonymous user can query your
LDAP server using a tool such as LdapMiner
Solution: Disable NULL base connections.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 496