(PVS) Signatures - Tenable Network Security

CVE Not available
OpenSSH < 4.1.0p2 / 4.2 Timing Attack
PVS ID: 3787 FAMILY: SSH RISK: LOW NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host discloses information regarding the availability of user
accounts.\n\nThe remote host is running a version of OpenSSH that is vulnerable to a flaw
in the way that it handles authentication requests. Specifically, OpenSSH is alleged to vary
response time based on the complexity (or availability) of the user password. An account
that had no password would elicit a quicker SSH response than an account that had a
defined password. An attacker exploiting this flaw would be able to determine local
accounts that had passwords. This information would be useful in other more complex
attacks. Tthe reported version of SSH is: \n %L
Solution: Upgrade to version 4.2, 4.1.0p2 or higher.
CVE-2006-5229
ZABBIX Multiple Overflows
PVS ID: 3788 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote
server is running ZABBIX, an open-source tool that is used to manage network devices.
This version of ZABBIX is vulnerable to a flaw in the way that it handles agent data. An
attacker spoofing an agent would be able to exploit a number of flaws that would give the
attacker the rights of the ZABBIX server.
Solution: No solution is known at this time.
CVE-2006-6693
ZABBIX Client Detection
PVS ID: 3789 FAMILY: Generic RISK: INFO NESSUS ID:Not Available
Description: The remote host is running the ZABBIX client. ZABBIX is a client-server application that
allows a central server to collect and manage results from multiple clients.
Solution: N/A
CVE Not available
LogMeIn Listening Server Detection
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3790 FAMILY: Policy RISK: LOW NESSUS ID:Not Available
Family Internet Services 979