(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote BIND server, according to its version number, has a flaw in the way
'authvalidator()' is implemented. An attacker may be able to launch a denial of service
attack against the remote service.
Solution: Upgrade to Bind 8.4.6 or higher or the newest version of BIND 9.
CVE-2005-0034
Cisco IOS 12.0 IPv6 Remote DoS
PVS ID: 2558 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\n The
remote Cisco device has enabled IPv6. On many Cisco devices, it may be possible to make
the remote device crash when sending it malformed IPv6 packets. These vulnerabilities
would allow a remote attacker to potentially cause the Cisco machine to reboot repeatedly,
causing a loss of availability.
Solution: Ensure that IPv6 functionality is required and then ensure that a patched version of Cisco
IOS is installed.
CVE Not available
gpsd < 2.8 gpsd_report() Function Remote Format String
PVS ID: 2559 FAMILY: Generic RISK: HIGH NESSUS ID:16265
Description: Synopsis :\n\nThe remote host is vulnerable to a remote 'format string' flaw.\n\nThe remote
host is running GPSD, a daemon that monitors a GPS device\nand publishes its data over
the network.\n\nThe remote version of this software is vulnerable to format string
attack\ndue to the way it uses the syslog() call. An attacker may exploit this flaw\nto
execute arbitrary code on the remote host.
Solution: Upgrade to gpsd 2.8 or higher.
gpsd Detection
CVE Not available
PVS ID: 2560 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running GPSD, a daemon that monitors a GPS device and publishes its
data over the network.
Solution: Ensure that this server/service is in alignment with corporate policies and guidelines.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 652