27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

CVE-2006-1681<br />

PHP < 5.1.4 Multiple Vulnerabilities<br />

<strong>PVS</strong> ID: 3509 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows local attackers to execute<br />

arbitrary commands.\n\nThe remote host is running a version of PHP that is older than<br />

5.1.4. This version is reported vulnerable to several flaws that may allow an attacker, with<br />

the right to execute PHP scripts, the ability to execute arbitrary code. Executed code would<br />

be run with the permissions of the web server process.<br />

Solution: Upgrade to version 5.1.4 or higher.<br />

CVE-2006-1494<br />

Outlook Express .wab File Processing Overflow<br />

<strong>PVS</strong> ID: 3510 FAMILY: SMTP Clients<br />

RISK:<br />

MEDIUM<br />

NESSUS ID:Not Available<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote client is<br />

running Microsoft Outlook Express. The noted version of Outlook Express is vulnerable to<br />

a buffer overflow in the way that it handles the parsing of .wab files. An attacker exploiting<br />

this flaw would need to be able to entice the user into opening the attachment. Successful<br />

exploitation would result in code being executed with the rights of the compromised user.<br />

Solution: Upgrade or patch according to vendor recommendations.<br />

CVE-2006-0014<br />

Nokia Intellisync Web Portal Detection<br />

<strong>PVS</strong> ID: 3511 FAMILY: Generic RISK: INFO NESSUS ID:Not Available<br />

Description: The remote server is a Nokia Intellisync Server. These portals are designed for access by<br />

users of portable devices (PDA, cell phone). One of the server components is a syncing port<br />

(TCP/3102) that maintains state and synchronization with the remote clients.<br />

Solution: N/A<br />

CVE Not available<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

Mozilla Firefox < 1.5.0.2 or 1.0.8 Multiple Vulnerabilities<br />

<strong>PVS</strong> ID: 3512 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available<br />

Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe<br />

remote host is using Firefox. The installed version of Firefox contains various security<br />

issues, several of which are critical as they can be easily exploited to execute arbitrary shell<br />

Family Internet Services 905

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!