(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running Microsoft Media Player version: \n %L .\n\nThere is a flaw in this
version of Media Player that would allow a remote attacker to crash the application. The
flaw is in the way that Media Player parses long playlist files. An attacker exploiting this
flaw would need to be able to convince a user to open a malicious playlist file.
Solution: Upgrade to a version of Windows Media Player higher than 10.00.00.4036.
CVE-2006-6134
WinGate < 6.2.0 Compressed Name Pointer DoS
PVS ID: 3818 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote proxy is affected by a denial of service vulnerability.\n\nThe
remote host appears to be running WinGate, a Windows application for managing and
securing Internet access. The version of WinGate installed on the remote host contains a
flaw involving the processing of DNS requests with compressed name pointers. By sending
a specially-crafted DNS request to a UDP port on which WinGate is listening, an
unauthenticated remote attacker can cause the affected application to consume 100% of the
available CPU, thereby denying service to legitimate users.
Solution: Upgrade to version 6.2.0 or higher.
iTunes Detection
CVE-2006-4518
PVS ID: 3819 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is running software that should be authorized with respect to
corporate policy.\n\nThe remote host is running an iTunes music share version
%L.\niTunes is a software package that is used to manage music media files. iTunes has a
'music share' feature that allows user(s) to access their music via an iTunes web server.
Solution: Ensure that such software is in alignment with Corporate policies and guidelines.
iTunes Client Detection
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3820 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: The remote host is running iTunes, an application for managing and listening to music
media files. The version of iTunes client is: \n %L .
Solution: Ensure that such software is in alignment with corporate policies and guidelines.
Family Internet Services 988