(PVS) Signatures - Tenable Network Security

Solution: No solution is known at this time.
CVE-2005-0291
Ocean12 ASP Calendar Administrative Interface Access
PVS ID: 2540 FAMILY: Web Servers RISK: HIGH NESSUS ID:15974
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running Ocean12 ASP Calendar, a web
based\napplication written in ASP.\n\nThere is a flaw in the remote software that may
allow anyone\nto execute admnistrative commands on the remote host by requesting\nthe
page /admin/main.asp.\n\nAn attacker may exploit this flaw to deface the remote site
without\nany credentials.\n
Solution: No solution is known at this time.
CVE-2004-1400
Microsoft Anti-Spyware Detection
PVS ID: 2541 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host passes information across the network in an insecure
manner.\n\nThe remote host is running the Microsoft Anti-Spyware tool. Further, the
administrators have not disabled the default 'Spyware Community' feature. The Spyware
Community feature allows Microsoft to centrally track information regarding infected files,
versions, locations, and more. When a file is flagged as being spyware, the remote host will
automatically send this information (via the Internet) to Microsoft servers.
Solution: Ensure that the 'Spyware Community' feature is in alignment with corporate policies and
procedures.
Tor Tunnel Detection
CVE Not available
PVS ID: 2542 FAMILY: Backdoors
RISK:
MEDIUM
NESSUS ID:Not Available
Description: The remote client just started a Tor tunnel for routing network traffic over the Tor Tunnel
network. The Tor tunnel allows users to run applications such as peer-to-peer clients,
instant messaging and web browsers over a single encrypted tunnel. Tor also tunnels and
encrypts the DNS requests associated with such applications. By sending traffic over the
Tor network, users can bypass corporate policies, firewalls, and guidelines.
Solution: Ensure that the usage of the Tor network is in alignment with corporate polices and
guidelines.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 647