(PVS) Signatures - Tenable Network Security

Description: The remote host is running the IPSEC Express 4.0.1 VPN Server.\nA VPN (Virtual Private
Network) allows remote users to connect to an internal network as if they were local users.
A VPN that allows split-tunneling will essentially serve as a bridge between the remote
network and the internal network. Special care should be taken to ensure that remote VPN
clients connect securely and do not introduce an unacceptable level of risk to the internal
computing environment.
Solution: Ensure that the VPN is acceptable with respect to corporate guidelines and policies.
CVE Not available
SSH IPSEC Express 4.1.0 VPN Detection
PVS ID: 3084 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running the IPSEC Express 4.1.0 VPN Server.\nA VPN (Virtual Private
Network) allows remote users to connect to an internal network as if they were local users.
A VPN that allows split-tunneling will essentially serve as a bridge between the remote
network and the internal network. Special care should be taken to ensure that remote VPN
clients connect securely and do not introduce an unacceptable level of risk to the internal
computing environment.
Solution: Ensure that the VPN is acceptable with respect to corporate guidelines and policies.
CVE Not available
SSH IPSEC Express 4.2.0 VPN Detection
PVS ID: 3085 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote host is running the IPSEC Express 4.2.0 VPN Server.\nA VPN (Virtual Private
Network) allows remote users to connect to an internal network as if they were local users.
A VPN that allows split-tunneling will essentially serve as a bridge between the remote
network and the internal network. Special care should be taken to ensure that remote VPN
clients connect securely and do not introduce an unacceptable level of risk to the internal
computing environment.
Solution: Ensure that the VPN is acceptable with respect to corporate guidelines and policies.
CVE Not available
VP-ASP Multiple Script SQL Injection (2)
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3086 FAMILY: CGI RISK: HIGH NESSUS ID:19229
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is using the VP-ASP, a shopping cart program written in ASP.
The remote version of this software is vulnerable to three SQL injection vulnerabilities in
the files shopaddtocart.asp, shopaddtocartnodb.asp and shopproductselect.asp. An attacker
may exploit these flaws to execute arbitrary SQL statements against the remote database.
Family Internet Services 789