(PVS) Signatures - Tenable Network Security

CVE-2005-1007
TLSv1 Traffic Negotiation Detection
PVS ID: 2791 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The server on this port is tunneling traffic through TLSv1.
Solution: N/A
CVE Not available
SSLv3 Traffic Negotiation Detection
PVS ID: 2792 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The server on this port is tunneling traffic through SSL version 3.
Solution: N/A
CVE Not available
Gaim < 1.2.1 Multiple Vulnerabilities
PVS ID: 2793 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe
remote host seems to be running Gaim, a popular open-source multi-protocol
instant messenger. It is reported that this version of Gaim is prone to a flaw in
the way that it handles malformed HTML data. Specifically, a content-parsing
flaw in the 'gaim_markup_strip_html' function can cause the application to
fail, leading to a loss of availability. Further, there are reported flaws within
the IRC and Jabber plugins that can lead to a remote Denial of Service. In
addition, it is reported that a flaw within the IRC plugin can allow the
injection of Gaim scripting language commands.
Solution: Update to Gaim 1.2.1 or higher.
CVE-2005-0966
Passive Vulnerability Scanner (PVS) Signatures
Pavuk < 0.9.32 Multiple Unspecified Remote Buffer Overflows
PVS ID: 2794 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an arbitrary 'command insertion'
flaw.\n\nThe remote host is using a version of Pavuk, a web spider, that is vulnerable to
multiple unspecified buffer overflows. An attacker can construct a malicious website that is
designed to trigger the vulnerability and run arbitrary code on the client machine.
Family Internet Services 719