(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running SAMI FTP server. It has been reported that this version of SAMI is vulnerable to a
buffer overflow in the way that it handles USER and PASSWORD information. An
attacker exploiting this flaw would be able to execute arbitrary code on the remote SAMI
FTP server.
Solution: No solution is known at this time.
CVE-2006-2212
AWStats < 6.6 migrate Variable Command Execution
PVS ID: 3536 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an arbitrary 'command insertion'
flaw.\n\nThe remote host is running AWStats, a CGI log analyzer. There are various
content-parsing flaws in the remote version of this software that would allow an attacker to
execute code on the remote host. An attacker exploiting this flaw would only need to be
able to generate HTTP requests to the awstats.pl CGI script. A successful attack would
allow the attacker to run system commands with the privileges of the CGI script.
Solution: Upgrade to version 6.6 or higher.
CVE-2006-2237
Distributed Network Protocol v3 Client Detection (SCADA)
PVS ID: 3552 FAMILY: SCADA RISK: INFO NESSUS ID:Not Available
Description: The remote client is running the Distributed Network Protocol v3 client. This
protocol is common on SCADA networks and should be protected or segmented from
the production network.
Solution: N/A
CVE Not available
Distributed Network Protocol v3 Server Detection
PVS ID: 3553 FAMILY: SCADA RISK: INFO NESSUS ID:Not Available
Description: The remote server is running the Distributed Network Protocol v3 server. This
protocol is common on SCADA networks and should be protected or segmented from
the production network.
Solution: N/A
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 913