(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote HTTP proxy server is prone to a buffer overflow attack.\n\nThe
remote host appears to be running WinGate Proxy Server, a Windows application for
managing and securing Internet access. According to its banner, the version of WinGate
installed on the remote host is affected by a buffer overflow vulnerability in its HTTP
proxy service. An attacker with access to use the proxy may be able to exploit this issue to
execute arbitrary code on the remote host. By default, the service operates with LOCAL
SYSTEM privileges, which means that a successful attack may result in a complete
compromise of the affected system.
Solution: Upgrade to version 6.1.3 or higher.
CVE-2006-2926
'The Bat' Mass Mailer Detection
PVS ID: 3643 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote client is running 'The Bat', a piece of software that is used to automate the
sending of many emails. The presence of 'The Bat' often indicates the existence of a
spamming mail server.
realtime
Solution: N/A
CVE Not available
Dynamic DNS Dynamic Update Client (DUC) Detection
PVS ID: 3644 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote host is configured as a dynamic DNS server. Further, it is using software that
automatically queries and updates an Internet DNS database whenever a new client IP
address is obtained. This sort of software is often used by individuals who are connected to
the Internet via a Dynamic (DHCP) IP address.
Solution: Ensure that this dynamic domain name is being used in compliance with corporate
standards and guidelines.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
TIBCO < 7.5.1 Rendezvous HTTP Administrative Interface Remote Overflow
PVS ID: 3645 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the TIBCO Rendezvous web server. Rendezvous is part of the TIBCO messaging
suite that facilitates network-based communication. This version of Rendezvous ( %L ) is
vulnerable to a remote buffer overflow. An attacker exploiting this flaw would be able to
execute arbitrary code on the remote Rendezvous server.
Family Internet Services 940