(PVS) Signatures - Tenable Network Security

Knox Arkeia Network Backup Server Detection
PVS ID: 2634 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running Arkeia Network Backup Server. This server is used to
automatically connect to client machines and retrieve backups on a regular schedule.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
Knox Arkeia Type 77 Request Remote Buffer Overflow
PVS ID: 2635 FAMILY: Generic RISK: HIGH NESSUS ID:17158
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Arkea Network Backup agent, an agent system designed to remotely perform
backups of the remote host. The remote version of this agent contains a buffer overflow
vulnerability that may allow an attacker to execute arbitrary commands on the remote host
with the privileges of the Arkeia daemon.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-0491
ZeroBoard Multiple Vulnerabilities
PVS ID: 2636 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Cross-Site Scripting (XSS) attack.\n\nThe
remote host is running ZeroBoard, a web-based bulletin board written in PHP. This version
of Zeroboard is vulnerable to a cross-site scripting (XSS) flaw as well as a flaw in the
'preg_replace' function. An attacker exploiting\n these flaws would require that the attacker
be able to:\n1) convince an unsuspecting user to visit a malicious website\n2) send HTTP
requests that are parsed by the 'preg_replace' function. Successful exploitation leads to
arbitrary code execution on the remote system or arbitrary code executing in client
browsers (after following a malicious URI).
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-1820
PuTTY < 0.57 SFTP Remote Buffer Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2637 FAMILY: SSH RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a vulnerable version of PuTTY, a SSH client built for Linux and UNIX variants as
well as Microsoft Windows operating systems. This version of PuTTY does not properly
handle an integer value passed from the SSH Server during an SFTP connection. An
attacker exploiting this flaw would need to be able to convince a user to use PuTTY to
Family Internet Services 673