(PVS) Signatures - Tenable Network Security

PVS ID: 1951 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a version of Speak Freely that is vulnerable to a Denial of Service
attack that may be exploited by an attacker by sending a malformed GIF (using the "show
your face feature") to the vulnerable host.
Solution: The vendor has discontinued this product.
CVE Not available
Winamp MIDI Plugin Track Size Overflow
PVS ID: 1952 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nWinamp versions 2.91
and below suffer from a vulnerability which allows an attacker to overflow the client with a
specially crafted MIDI file. Mass exploitation of this vulnerability would be relatively easy
for an attacker with a streaming media server.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
Citrix MetaFrame Service Enumeration
PVS ID: 1953 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:11138
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote Citrix server is configured in such a way as to allow anonymous
remote users to enumerate services.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
LDAP NULL Base Connection
PVS ID: 1954 FAMILY: Generic
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:10722
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nImproperly configured LDAP servers will allow the directory BASE to be set to
NULL. This allows information to be gathered without any prior knowledge of the
directory structure. Coupled with a NULL BIND, an anonymous user can query your
LDAP server using a tool such as LdapMiner.
Family Internet Services 498