(PVS) Signatures - Tenable Network Security

VMWare Detection
CVE Not available
PVS ID: 3396 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host passes information across the network in an insecure
manner.\n\nThe remote host is running VMWare, an application that allows users to run
multiple operating systems virtually. VMWare passes the license key in plaintext across the
Internet. An attacker sniffing the network will be able to gain access to the VMWare
key:\n\n%L
Solution: Disable automatic updates and only use encrypted sessions to update VMWare software.
CVE Not available
Invision Power Board Dragoran Forum < 1.4 index.php site Parameter SQL Injection
PVS ID: 3397 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running the Dragoran Forum, a PHP-based web portal. This version of Dragoran is
vulnerable to a SQL Injection flaw. An attacker exploiting this flaw would be able to
execute arbitrary SQL commands on the Dragoran backend database server.
Solution: Upgrade to version 1.4 or higher.
CVE-2006-0520
Oracle Database Detection
PVS ID: 3398 FAMILY: Database RISK: INFO NESSUS ID:Not Available
Description: The remote host is running an Oracle database.
Solution: N/A
CVE Not available
Nmap Scanner Detection
PVS ID: 3399 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the Nmap port scanner.
Solution: Ensure that this tool is authorized according to corporate policies and guidelines.
CVE Not available
Nmap Scanner Detection
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 873