(PVS) Signatures - Tenable Network Security

CVE-2005-1897
Sawmill < 7.1.6 Multiple Vulnerabilities
PVS ID: 2947 FAMILY: Web Servers RISK: NONE NESSUS ID:18507
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe
remote host is running Sawmill, an application for analyzing web logs. Sawmill
typically is viewed via a web front-end and works off of a MySQL server. This
version of Sawmill is vulnerable to multiple remote flaws. While some of the flaws
have not yet been fully disclosed, it is believed that the flaws will lead to either
privilege escalation or Cross-Site Scripting (XSS). An attacker exploiting these
flaws would either require credentials or require that a user browse to a malicious
URI.
Solution: Upgrade to version 7.1.6 or higher.
CVE-2005-1900
KAME/racoon VPN Detection
PVS ID: 2948 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running a KAME Racoon VPN Server.\n\nA VPN (Virtual Private
Network) allows remote users to connect to an\ninternal network as if they were local
users. A VPN that allows\nsplit-tunneling will essentially serve as a bridge between the
remote\nnetwork and the internal network. Special care should be taken to\nensure that
remote VPN clients connect securely and do not introduce\nan unacceptable level of risk to
the internal computing environment.
Solution: Ensure that the VPN is acceptable with respect to corporate guidelines and policies.
CVE Not available
Microsoft Windows 2000 VPN Detection
PVS ID: 2949 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running the Microsoft Windows 2000 VPN Server.\n\nA VPN (Virtual
Private Network) allows remote users to connect to an\ninternal network as if they were
local users. A VPN that allows\nsplit-tunneling will essentially serve as a bridge between
the remote\nnetwork and the internal network. Special care should be taken to\nensure that
remote VPN clients connect securely and do not introduce\nan unacceptable level of risk to
the internal computing environment.
Solution: Ensure that the VPN is acceptable with respect to corporate guidelines and policies.
CVE Not available
Netscreen VPN Detection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 765