(PVS) Signatures - Tenable Network Security

CVE Not available
Lotus Domino Server Multiple XSS
PVS ID: 3226 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: The remote host is running a version of Lotus Domino Server that is prone to multiple
remote Cross-Site Scripting (XSS) flaws. An attacker exploiting this flaw would need to be
able to convince a user to browse to a malicious URI. Successful exploitation would result
in script code executing within the user's browser.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-4819
ZoneAlarm Personal Firewall < 6.0.667.000 Multiple Vulnerabilities
PVS ID: 3227 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running ZoneAlarm, a personal firewall for the Windows platform. The client is running
a version of ZoneAlarm that is less than 6.0.667.000. This version of ZoneAlarm is
reported vulnerable to a number of flaws that can render the firewall unuseable or, in some
instances, give the users a false sense of security.
Solution: Upgrade to version 6.0.667.000 or higher.
CVE-2005-3560
DSL/CableModem Internet Gateway Detection
PVS ID: 3228 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running an inherently insecure protocol or
application.\n\nThe remote host is advertising Internet Gateway Services. This is common
in many off-the-shelf cable modem or DSL modem hardware. On a production network,
such a device may be inadvertently introducing risk due to a multi-homing of the internal
network.
Solution: Ensure that such devices are allowed by corporate policies and guidelines.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
ClamAV < 0.86.3 Content-parsing Multiple Overflows
PVS ID: 3229 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Family Internet Services 829