(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Elm, an email client. This version of Elm is vulnerable to a buffer overflow via the
'Expires' header parameter. An attacker exploiting this flaw would send a specially formed
email with a very long 'Expires' value. Successful exploitation would result in arbitrary
code being executed.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-2665
Woltlab Burning Board modcp.php Multiple Parameter SQL Injection
PVS ID: 3175 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL
injection attack.\n\nThe remote host is running Woltlab Burning Board, a web
bulletin board written in PHP. This version of Burning Board is vulnerable to a
remote SQL injection attack. An attacker exploiting this flaw would send a
malformed 'x' or 'y' parameter to the 'modcp.php' PHP script. Succesful exploitation
would result in the attacker being able to read or write confidential data. In some
instances, the attacker may be able to execute arbitrary code on the remote database
server.
Solution: No solution is known at this time.
CVE-2005-2673
OpenVPN TCP Client Detection
PVS ID: 3176 FAMILY: Generic RISK: LOW NESSUS ID:Not Available
Description: The remote client is running the OpenVPN TCP Client. A VPN (Virtual Private Network)
allows remote users to connect to an internal network as if they were local users. A VPN
that allows split-tunneling will essentially serve as a bridge between the remote network
and the internal network. Special care should be taken to ensure that remote VPN clients
connect securely and do not introduce an unacceptable level of risk to the internal
computing environment.
Solution: Ensure that the VPN is acceptable with respect to corporate guidelines and policies.
CVE Not available
OpenVPN TCP Proxy Client Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3177 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: The remote client is running the OpenVPN TCP Client. The client is configured to use an
HTTP proxy to tunnel the VPN to an external network. A VPN (Virtual Private Network)
allows remote users to connect to an internal network as if they were local users. A VPN
that allows split-tunneling will essentially serve as a bridge between the remote network
and the internal network. Special care should be taken to ensure that remote VPN clients
Family Internet Services 815