27.02.2013 Views

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

(PVS) Signatures - Tenable Network Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Description: The remote client is a LogMeIn server awaiting remote connection. LogMeIn is an<br />

application that allows users to access their computers (work or home) from anywhere in<br />

the world via a web browser. LogMeIn works by installing an agent on the computer that is<br />

to be accessed remotely. The application then establishes a client connection to an Internet<br />

server and allows the user to connect over the established HTTPS connection. As such,<br />

LogMeIn has the ability to bypass firewalls and proxies.<br />

Solution: Ensure that such usage is in alignment with corporate policies and guidelines regarding<br />

remote access.<br />

CVE Not available<br />

LogMeIn Listening Server Detection<br />

<strong>PVS</strong> ID: 3791 FAMILY: Policy RISK: LOW NESSUS ID:Not Available<br />

Description: The remote client is a LogMeIn server awaiting remote connection. LogMeIn is an<br />

application that allows users to access their computers (work or home) from anywhere in<br />

the world via a web browser. LogMeIn works by installing an agent on the computer that is<br />

to be accessed remotely. The application then establishes a client connection to an Internet<br />

server and allows the user to connect over the established HTTPS connection. As such,<br />

LogMeIn has the ability to bypass firewalls and proxies.<br />

Solution: Ensure that such usage is in alignment with corporate policies and guidelines regarding<br />

remote access.<br />

ColdFusion <<br />

CVE Not available<br />

<strong>PVS</strong> ID: 3792 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available<br />

Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the<br />

bypassing of authentication.\n\nThe remote host is running Macromedia<br />

ColdFusion, a web application server. This version of Macromedia is<br />

vulnerable to a flaw where a user with local system access can bypass<br />

authentication and gain administrative access over the application. Successful<br />

exploitation impacts confidentiality, integrity, and availability.<br />

Solution: Upgrade to version 7,0,2,142559 or higher.<br />

CVE-2006-3978<br />

Blueshoes GoogleSearch.php APP[path][lib] Parameter Remote File Inclusion<br />

<strong>PVS</strong> ID: 3793 FAMILY: CGI<br />

Passive Vulnerability Scanner (<strong>PVS</strong>) <strong>Signatures</strong><br />

RISK:<br />

MEDIUM<br />

NESSUS ID:Not Available<br />

Family Internet Services 980

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!