(PVS) Signatures - Tenable Network Security

Solution: Ensure that the VPN is acceptable with respect to corporate guidelines and policies.
CVE Not available
PHP Advanced Transfer Manager < 1.22 File Upload Arbitrary Command Execution
PVS ID: 2933 FAMILY: CGI RISK: NONE NESSUS ID:18207
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nAccording to its
banner, the version of PHP Advanced Transfer Manager installed on the remote host allows
authenticated users to upload arbitrary files and then run them subject to the privileges of
the web\nserver user.
Solution: Upgrade to version 1.22 or higher.
CVE-2005-1681
Mac OS X 10.4.0 Detection
PVS ID: 2934 FAMILY: Operating System Detection RISK:
MEDIUM
NESSUS ID:18353
Description: The remote host is running a version of Mac OS X 10.4 that is older than 10.4.2 : \n %L
Solution: Upgrade to version 10.4.2 or higher.
CVE-2005-1473
Qualcomm Qpopper < 4.0.5 Multiple Local Privilege Escalation
PVS ID: 2935 FAMILY: POP Server RISK: HIGH NESSUS ID:18361
Description: Synopsis :\n\nThe remote host is vulnerable to a local privilege escalation flaw.\n\nThe
remote host is running Qpopper, a POP3 mail server for Unix-type systems.\nThis version
of Qpopper is vulnerable to multiple local configuration flaws.\nA local attacker exploiting
these flaws would be able to elevate privileges\non the Qpopper system.
Solution: Upgrade to version 4.0.5 or higher.
CVE-2005-1152
Delegate Compressed DNS Packet Remote DoS
PVS ID: 2936 FAMILY: DNS Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the Delegate DNS Service. This version of Delegate is vulnerable to
a remote Denial of Service flaw. An attacker exploiting this flaw would send a malformed
DNS query to the host. Successful exploitation would result in the loss of availability.
Family Internet Services 761