(PVS) Signatures - Tenable Network Security

PostgreSQL < 8.0.1 Multiple Remote Vulnerabilities
PVS ID: 2583 FAMILY: Database
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote PostgreSQL server is vulnerable to a number of critical flaws. Some of these flaws
require an attacker to have a valid account with credentials; however, some of the attacks
do not require the attacker to have any sort of credentials.
Solution: Upgrade to PostgreSQL 8.0.1 or higher.
CVE-2005-0247
Cisco IDS Plaintext Telnet Service Detection
PVS ID: 2584 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host passes information across the network in an insecure
manner.\n\nThe remote host is running the Cisco IDS %L \nThe IDS administrator has
enabled the plaintext telnet service. An attacker sniffing the local network can determine
the user ID and password required to administer the machine.
Solution: Ensure that telnet is required in order to administer the machine.
CVE Not available
Newspost < 2.0-r1 socket_getline Function Remote Overflow
PVS ID: 2585 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using the Newspost NNTP client. Newspost is used to automate the sending of binary files
to different NNTP servers. There is a flaw in this version of Newspost that would allow the
operator of a malicious news server to create a buffer overflow within the Newspost client.
In order to execute this attack, the attacker would need to be able to convince a Newspost
user to submit a post to the malicious NNTP server. The remote host is running Newspost
version: %L
Solution: Upgrade to version 2.0-r1 or higher.
CVE-2005-0101
Ventia DeskNow Multiple Remote Vulnerabilities
PVS ID: 2586 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 659