(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running iTunes - an application for managing and listening to music media files. The
version of iTunes client is %L. \nThis version of iTunes is vulnerable to a buffer overflow.
An attacker exploiting this flaw would need to be able to entice an iTunes user into opening
a malformed file. Successful exploitation would result in the attacker executing arbitrary
code on the remote system.
Solution: Upgrade to version 4.8 or higher.
CVE-2005-1248
GeoVision Digital Surveillance System Detection
PVS ID: 2890 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:18220
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running GeoVision Digital Surveillance System, a
web-based surveillance system that allows remote operators to control and manage data
streams from multiple cameras. This version of GeoVision is vulnerable to a remote flaw
that allows attackers to view images without authentication. An attacker can query any of
the controlled cameras for the current image stored. Successful exploitation could lead to
the compromise of confidential data.
Solution: Upgrade to version 7.0 or higher.
CVE-2005-1552
GeoVision Digital Surveillance System Detection
PVS ID: 2891 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: The remote host is running GeoVision Digital Surveillance System, a web-based
surveillance system that allows remote operators to control and manage data streams from
multiple cameras.
Solution: Ensure that the existence of the surveillance system is explicitly allowed with respect to
corporate policies and guidelines.
CVE Not available
myServer Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2892 FAMILY: Web Servers RISK: LOW NESSUS ID:18218
Description: The remote host is running myServer 0.8.0 or older. There is a flaw in the remote version
of this software that may allow an attacker to list directories or execute a Cross-Site
Scripting (XSS) attack. The first flaw would allow an attacker access to potentially
confidential data via a directory listing. The second flaw would require the attacker to be
able to convince a user to browse a malicious URI. Successful exploitation would result in
the attacker being able to retrieve potentially confidential data (such as authentication
Family Internet Services 748