Open Source Security Tools : Practical Guide to Security Applications part 58. Few frontline system administrators can afford to spend all day worrying about security. But in this age of widespread virus infections, worms, and digital attacks, no one can afford to neglect network defenses. Written with the harried IT manager in mind, Open Source Security Tools is a practical, hands-on introduction to open source security tools. | Page 549 Friday June 25 2004 1 50 PM 549 Appendix E Nessus Plug-ins Family Plug-in Name CVE ID Number s BugTraq ID Number s Windows IE Cumulative patch CAN-2003-0838 CAN-2003-0809 CAN-2003-0530 CAN-2003-0531 CAN-2003-0113 CAN-2003-0114 CAN-2003-0115 CAN-2003-0116 3578 8556 8565 Windows Microsoft s SQL version less than or equal to 7 CAN-2000-0199 1055 Windows SMB Registry Autologon Windows Unchecked buffer in SQLXML CVE-2002-0186 CVE-2002-0187 CAN-2002-0186 CAN-2002-0187 5004 5005 Windows MS Service Pack may leave passwords on system CVE-2000-0402 1281 Windows SMB Registry permissions of Schedule CAN-1999-0589 Windows Unchecked Buffer in XP Shell Could Enable System Compromise 329390 CAN-2002-1327 Windows Still Image Service Privilege Escalation patch CVE-2000-0851 1651 Windows SMB Registry permissions of the RAS key CAN-2001-0045 2064 Windows Word Macros may run automatically CAN-2003-0664 CAN-1999-0354 8533 Windows MS SQL Installation may leave passwords on system CAN-2002-0643 Page 550 Friday June 25 2004 1 50 PM 550 Appendix E Nessus Plug-ins Family Plug-in Name CVE ID Number s BugTraq ID Number s Windows DBTools DBManager Information Disclosure 7040 Windows Winreg registry key write-able by non-admins CVE-2002-0049 4053 Windows Citrix redirection bug Windows Microsoft s SQL Blank Password CAN-2000-1209 1281 Windows Buffer Overrun in the ListBox and in the ComboBox 824141 CAN-2003-0659 Windows SMB Request Handler Buffer Overflow CAN-2003-0345 8152 Windows Malformed request to index server CVE-2001-0244 CVE-2001-0245 2709 Windows Winsock Mutex vulnerability CVE-2001-0006 2303 Windows CA Unicenter s File Transfer Service is running Windows Trusting domains bad verification CVE-2002-0018 3997 Windows SMB Registry XP Service Pack version CAN-1999-0662 Windows Security issues in the remote version of Flash- Player 7005 Windows Flaw in Windows Script Engine Q814078 CAN-2003-0010 7146 Windows SMB Registry NT4 Service
