(PVS) Signatures - Tenable Network Security

of unsuspecting users.
Solution: Upgrade to version 2.2.4 or higher.
CVE-2005-3681
Absinthe SQL Injection Tool Detection
PVS ID: 3294 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: The remote host is running Absinthe. Absinthe is a tool that automates SQL Injection
queries and makes a local copy of the remote database. Given a form or script that is
vulnerable to SQL Injection, Absinthe will take care of all the brute-forcing necessary to
build a local copy of the database. The script that Absinthe appears to be targeting is\n\n%L
Solution: Ensure that this application is being used in conjunction with corporate policies and
guidelines.
CVE Not available
Macromedia Flash < 2.0 Malformed RTMP Data DoS
PVS ID: 3295 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Macromedia Flash server, a multimedia server. This version of Flash
is reported to be vulnerable to a flaw; however, the details of the flaw have not been
released. It is rumoured that the flaw would lead to Denial of Service (DoS) attack.
Solution: Upgrade to version 2.0 or higher.
CVE-2005-3901
iTunes For Windows < 6.0 Local Code Execution
PVS ID: 3296 FAMILY: Web Clients RISK: HIGH NESSUS ID:20218
Description: Synopsis :\n\nThe remote host contains an application that is affected by a local code
execution flaw.\n\nAccording to its banner, the version of iTunes for Windows on the
remote host launches a helper application by searching for it through various system paths.
An attacker with local access can leverage this issue to place a malicious program in a
system path and have it called before the helper application.
Solution: Upgrade to version 6.0 or higher.
CVE-2005-2938
HTTPrint Scanning Software Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3297 FAMILY: Policy RISK: LOW NESSUS ID:Not Available
Family Internet Services 849