(PVS) Signatures - Tenable Network Security

CVE-2005-0606
Gaim < 1.1.4 Remote DoS
PVS ID: 2654 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host appears to be running Gaim, a popular open-source multi-protocol instant
messenger. It is reported that this version of Gaim is prone to a flaw in the way that it
handles malformed HTML data. An attacker exploiting this flaw would need to be able to
communicate with a vulnerable GAIM user. Upon successful exploitation, the Gaim client
would stop responding.\nThere is a second issue with this version of Gaim that is similar to
the first. Specifically, downloaded files which include bracket characters like '(' or ')' will
cause the client to crash.
Solution: Update to Gaim 1.1.4 or higher.
Gaim Detection
CVE-2005-0208
PVS ID: 2655 FAMILY: Internet Messengers RISK: INFO NESSUS ID:Not Available
Description: The remote host seems to be running Gaim, a popular open-source multi-protocol instant
messenger.
Solution: N/A
CVE Not available
PeerFTP Client Detection
PVS ID: 2656 FAMILY: Peer-To-Peer File Sharing RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote host is running PeerFTP. PeerFTP is a peer-to-peer
application that utilizes the FTP protocol. PeerFTP is both a client and a server application.
The remote host is offering files for download as well as downloading files. Further, as the
host is running PeerFTP version 5, there is a flaw in the way that passwords are stored. All
passwords are stored locally as plaintext.
Solution: No solution is known at this time.
CVE-2005-0517
BadBlue < 2.60 'GET' Request Remote Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2657 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Family Internet Services 679