(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host passes information across the network in an insecure
manner.\n\nThe remote host has just passed an encryption private key via plaintext on the
network. This is a risk in that private keys should only reside on a local system and if they
must be passed, they should be encrypted in transit.
Solution: Ensure that there are policies and guidelines in place that prohibit the passing of
private encryption data in plaintext.
CVE Not available
Encryption Private Key Detection (RSA)
PVS ID: 3780 FAMILY: Data Leakage RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host passes information across the network in an insecure
manner.\n\nThe remote host has just passed an encryption private key via plaintext on the
network. This is a risk in that private keys should only reside on a local system and if they
must be passed, they should be encrypted in transit.
Solution: Ensure that there are policies and guidelines in place that prohibit the passing of
private encryption data in plaintext.
CVE Not available
Encryption Private Key Detection (RSA)
PVS ID: 3781 FAMILY: Data Leakage RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host passes information across the network in an insecure
manner.\n\nThe remote host has just passed an encryption private key via plaintext on the
network. This is a risk in that private keys should only reside on a local system and if they
must be passed, they should be encrypted in transit.
Solution: Ensure that there are policies and guidelines in place that prohibit the passing of
private encryption data in plaintext.
CVE Not available
Encryption Private Key Detection (DSA)
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3782 FAMILY: Data Leakage RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host passes information across the network in an insecure
manner.\n\nThe remote host has just passed a DSA encryption private key via plaintext on
the network. This is a risk in that private keys should only reside on a local system and if
they must be passed, they should be encrypted in transit.
Solution: Ensure that there are policies and guidelines in place that prohibit the passing of
private encryption data in plaintext.
Family Internet Services 977