(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote web server is a version of Zope that is older than
2.9.4. There is a flaw in this version of Zope that may allow attackers to gain access to
confidential data. It is reported that the 'docutils' module does not properly parse
user-supplied data. Successful exploitation leads to loss of confidential data that may be
useful in further attacks.
Solution: Upgrade to version 2.9.4 or higher.
CVE-2006-3458
WinGate < 6.1.4 Build 1099 IMAP Service Traversal Arbitrary Mail Access
PVS ID: 3681 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Directory Traversal flaw.\n\nThe remote
host appears to be running WinGate Proxy Server, a Windows application for managing
and securing Internet access. According to its banner, the version of WinGate installed on
the remote host is affected by a directory traversal flaw in its IMAP service. An attacker
exploiting this flaw would only need to be able to connect to the IMAP service port,
authenticate and issue a malformed request. Successful exploitation would lead to a loss of
confidential data.
Solution: Upgrade to version 6.1.4 Build 1099 or higher.
CVE-2006-2917
Samba < 3.0.23 smdb Share Remote DoS
PVS ID: 3682 FAMILY: Samba
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote Samba server, according to its version number ('%L'), may be vulnerable to a
remote attack. An attacker can cause the Samba smbd service to fail by opening a large
number of connections. Successful exploitation leads to a loss of availability.
Solution: Upgrade to version 3.0.23 or higher.
MetaSploit Detection
CVE-2006-3403
PVS ID: 3683 FAMILY: Policy
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote server is running a MetaSploit Framework server.
Metasploit allows users to automatically exploit and backdoor vulnerable applications via
the network. The version of MetaSploit is %L.
Family Internet Services 951