27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>PVS</strong> ID: 2919 FAMILY: IRC Servers RISK: HIGH NESSUS ID:18291<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe<br />

remote host is running an ignitionServer IRC server. This version of ignitionServer is<br />

reported to be prone to a remote remote denial of service in the way that the server handles<br />

channel locking. Specifically, a non-operator can create a locked channel which cannot be<br />

unlocked by an authorized operator. The only way to clear the channel would be to reboot<br />

the server. This can cause a loss of availability.<br />

Solution: Upgrade to version 0.3.6p1 or higher.<br />

CVE-2005-1641<br />

Serendipity < 0.80 RC7 Multiple Vulnerabilities<br />

<strong>PVS</strong> ID: 2920 FAMILY: CGI<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:18298<br />

Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host<br />

is running Serendipity. Serendipity is a\nBlogging software that is implemented in PHP.<br />

This version of Serendipity\nis reported vulnerable to multiple remote exploits. It is<br />

reported that\nthis version is vulnerable to HTML injection, Cross-Site Scripting<br />

(XSS),\nand file upload flaws. An attacker exploiting these flaws would be able\nto gain or<br />

elevate privileges on the remote machine. An attacker may also\nbe able to user the server<br />

as an attack vector against unsuspecting users browsing the website.<br />

Solution: Upgrade to version 0.80 RC7 or higher.<br />

CVE-2005-1712<br />

NetWin SurgeMail < 3.0.0c3 Multiple Unspecified Remote Vulnerabilities<br />

<strong>PVS</strong> ID: 2921 FAMILY: SMTP Servers RISK: NONE NESSUS ID:18354<br />

Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host<br />

is running NetWin SurgeMail, a mail server application. The remote version of this<br />

software is vulnerable to multiple unspecified vulnerabilities that have been disclosed by<br />

the vendor.<br />

Solution: Upgrade to version 3.0.0c3 or higher.<br />

Groove Detection<br />

CVE-2005-1714<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

<strong>PVS</strong> ID: 2922 FAMILY: Generic RISK: INFO NESSUS ID:Not Available<br />

Description: The remote host is running %L, a virtual office workspace that\nallows remote users to<br />

collaborate via the Internet. Groove uses\ncentralized servers to keep remote workers<br />

synchronized with each other.<br />

Family Internet Services 757

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!