(PVS) Signatures - Tenable Network Security

Solution: Ensure that you are using the most recent version of Groove.
CVE Not available
Groove < 3.1.0 Build 2338 Multiple Vulnerabilities
PVS ID: 2923 FAMILY: Generic RISK: HIGH NESSUS ID:18355
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Groove, a virtual office workspace that allows remote users to collaborate via the
Internet. Groove uses centralized servers to keep remote workers synchronized with each
other. This version of Groove is vulnerable to multiple remote attacks. The attacks stem
from a lack of content parsing by the Groove product. An attacker exploiting these flaws
would need to be able to entice a Groove user into opening or viewing malicious files or
data from within the Groove application. Successful exploitation leads to the attacker being
able to execute arbitrary code on the unsuspecting user.
Solution: Upgrade to version 3.1.0 build 2338 or higher.
CVE-2005-1677
Cisco IOS VPN Detection
PVS ID: 2924 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running a Cisco IOS VPN server.\n\nA VPN (Virtual Private Network)
allows remote users to connect to an\ninternal network as if they were local users. A VPN
that allows\nsplit-tunneling will essentially serve as a bridge between the remote\nnetwork
and the internal network. Special care should be taken to\nensure that remote VPN clients
connect securely and do not introduce\nan unacceptable level of risk to the internal
computing environment.
Solution: Ensure that the VPN is acceptable with respect to corporate guidelines and policies.
CVE Not available
Cisco Unity VPN Detection
PVS ID: 2925 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running a Cisco Unity VPN server.\n\nA VPN (Virtual Private
Network) allows remote users to connect to an\ninternal network as if they were local
users. A VPN that allows\nsplit-tunneling will essentially serve as a bridge between the
remote\nnetwork and the internal network. Special care should be taken to\nensure that
remote VPN clients connect securely and do not introduce\nan unacceptable level of risk to
the internal computing environment.
Solution: Ensure that the VPN is acceptable with respect to corporate guidelines and policies.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 758