(PVS) Signatures - Tenable Network Security

PVS ID: 1963 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: A shell server was noted on the host. Typically, shells are used by remote users to manage
operating systems. Shells that pass traffic in plaintext introduce a risk to confidentiality and
privacy. In addition, many shells are used by malicious individuals as part of a Trojan
program or remote buffer overflow exploit.
Solution: Ensure that the remote shell is secured against data leakage and that it is a valid, approved
means of managing the remote machine.
CVE Not available
Subversion (SVN) < 1.0.6 Module File Restriction Bypass
PVS ID: 1964 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:13848
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve and
modify sensitive files or data.\n\nThe remote host is running a version of Subversion which
is older than 1.0.6. A flaw exists in the apache module mod_authz_svn in older versions.
An attacker can access to any file in a given Subversion repository despite restrictions set
by the administrator.
Solution: Upgrade to Subversion 1.0.6 or higher.
CVE-2004-1438
Rsync < 2.6.3 Sanitize_path Function Module Path Escaping
PVS ID: 1965 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw which allows attackers to retrieve and
modify sensitive files or data.\n\nThe remote host is running a rsync server, a program to
synchronize files and directories structure across a network. The version running on the
host may be vulnerable to a path escaping issue. An attacker may be able to write and read
files in the context of the server.
Solution: Upgrade to rsync 2.6.3 or higher.
CVE-2004-0792
F-Secure SSH Password Authentication Policy Evasion
PVS ID: 1966 FAMILY: SSH
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:12099
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running F-Secure SSH. This version contains a bug which
may allow a user to log in using a password even though the server policy disallows it. An
attacker may exploit this flaw to set up a dictionary attack against the remote SSH server
Family Internet Services 501