(PVS) Signatures - Tenable Network Security

Solution: Use ACLs to ensure that only trusted administrators can access the administrative GUI.
CVE Not available
Skype Technologies < 1.5.0.80 NSRRunAlertPanel Function Format String (Mac OS X)
PVS ID: 3772 FAMILY: Internet Messengers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a remote format string flaw.\n\nThe remote
host is using Skype, a peer to peer chat and VoIP software. The remote version of this
software contains a format string flaw. An attacker exploiting this flaw would need to be
able to convince a user to open a malicious URI that was handled by the Skype software.
Successful exploitation would result in the attacker executing arbitrary code.
Solution: Upgrade to version 1.5.0.80 or higher.
CVE-2006-5084
Mac OS X Generic Detection
PVS ID: 3773 FAMILY: Operating System Detection RISK: INFO NESSUS ID:Not Available
Description: The remote host is running Mac OS X.
Solution: N/A
CVE Not available
Encryption Private Key Detection (Generic)
PVS ID: 3774 FAMILY: Data Leakage RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host passes information across the network in an insecure
manner.\n\nThe remote host has just passed an encryption private key via plaintext on the
network. This is a risk in that private keys should only reside on a local system and if they
must be passed, they should be encrypted in transit.
Solution: Ensure that there are policies and guidelines in place that prohibit the passing of
private encryption data in plaintext.
CVE Not available
Encryption Private Key Detection (Generic)
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3775 FAMILY: Data Leakage RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host passes information across the network in an insecure
manner.\n\nThe remote host has just passed an encryption private key via plaintext on the
network. This is a risk in that private keys should only reside on a local system and if they
must be passed, they should be encrypted in transit.
Family Internet Services 975