(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host may be tricked into running an executable file.\n\nThe
remote host is running a version of Yahoo! Messenger that is reported vulnerable to a
remote file extension spoofing flaw. Specifically, if a user sends a malformed download
query that includes many '~@' sequences, the displayed name of the file will obfuscate the
true file type. An attacker can use this flaw to trick users into downloading files that they
believe are not malicious. Successful exploitation might lead to the attacker executing
arbitrary executables on the target system.
Solution: Upgrade to a version higher than 8.0.0.863.
CVE Not available
ClamAV < 0.88.4 UPX rsize Content-Parsing Overflow
PVS ID: 3701 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a heap overflow.\n\nThe remote host is
running ClamAV, an antivirus application. The remote host is running version: \n %L
\n\nThere is a remote content-parsing flaw in this version of ClamAV that could lead to a
heap overflow by sending a malformed file compressed with UPX. Successful exploitation
would result in the attacker executing arbitrary code.
Solution: Upgrade to version 0.88.4 or higher.
CVE-2006-4018
ColdFusion Administrative Interface Authentication Bypass
PVS ID: 3702 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the
bypassing of authentication.\n\nThe remote host is running Macromedia
ColdFusion, a web application server. This version of Macromedia is
vulnerable to a flaw where an unauthenticated user can bypass authentication
and gain administrative access over the application. Successful exploitation
impacts confidentiality, integrity and availability.
Solution: Upgrade to a version higher than 7,0,2,142559.
CVE-2006-4724
Recursive DNS Server Detection
PVS ID: 3703 FAMILY: DNS Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:10539
Description: Synopsis :\n\nThe remote name server allows recursive queries to be performed.\n\nIt is
possible to query the remote nameserver for third party names. If this is your internal
nameserver, then disregard this warning. If the host allows these recursive queries via UDP,
then the host can be used to 'bounce' Denial of Service attacks against another network or
system.
Family Internet Services 957