(PVS) Signatures - Tenable Network Security

Sun Secure Global Desktop / Tarantella < 4.20.983 Multiple XSS
PVS ID: 3760 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:22495
Description: The remote web server contains CGI scripts that are vulnerable to cross-site scripting
attacks. The remote web server contains a CGI script used by Sun Secure Global Desktop
or Tarantella, a Java-based program for web-enabling applications running on a variety of
platforms. According to the version reported in one of its scripts, the installation of the
software on the remote host fails to sanitize user-supplied input to several unspecified
parameters before using it to generate dynamic web content. An unauthenticated remote
attacker may be able to leverage these issues to inject arbitrary HTML and script code into
a user's browser to be evaluated within the security context of the affected web site.
Solution: Upgrade to version 4.20.983 or higher.
CVE-2006-4958
SiVus VOIP Vulnerability Scanner Detection
PVS ID: 3761 FAMILY: Policy RISK: INFO NESSUS ID:Not Available
Description: The remote client is scanning the network with the SiVus VOIP vulnerability scanner. This
tool scans networks and detects vulnerable VOIP SIP phones.
Solution: Ensure that such scanning is in alignment with corporate policies and guidelines.
SIP Client Detection
CVE Not available
PVS ID: 3762 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the following SIP client: \n %L \nThis protocol is used to
connect VoIP users via the Internet.
Solution: N/A
SIP Server Detection
CVE Not available
PVS ID: 3763 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the following SIP server: \n %L \nThis protocol is used to
connect VoIP users via the Internet.
Solution: N/A
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 972