(PVS) Signatures - Tenable Network Security

PVS ID: 4139 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the IBM 'Tivoli Provisioning Manager for OS Deployment' version
%L\nThis version of the software is vulnerable to a flaw in the way that it handles
malformed TFTP requests. An attacker exploiting this flaw can cause a crash that would
affect all of the Tivoli services on the server. An attacker exploiting this flaw would need to
be able to send malformed TFTP requests to the server.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2007-3268
Firefox < 2.0.0.5 Multiple Vulnerabilities
PVS ID: 4140 FAMILY: Web Clients RISK: HIGH NESSUS ID:25735
Description: Synopsis :\n\nThe remote Windows host contains a web browser that is affected by
multiple vulnerabilities.\n\nThe installed version of Firefox is affected by various security
issues, one of which may lead to execution of arbitrary code on the affected host subject to
the user's privileges.
Solution: Upgrade to version 1.5.0.12 / 2.0.0.4 or higher.
CVE-2007-3734
Ipswitch IMail Server < 2006.21 Multiple Vulnerabilities
PVS ID: 4141 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:25737
Description: Synopsis :\n\nThe remote mail server is affected by multiple vulnerabilities.\n\nThe remote
host is running Ipswitch IMail, a commercial messaging and collaboration suite for
Windows. According to its banner, the version of Ipswitch IMail installed on the remote
host has several buffer overflows in its IMAP service component, one of which can be
exploited to execute arbitrary code with SYSTEM privileges prior to authentication. In
addition, there is also an denial of service issue that can cause the IM server to crash
without authentication.
Solution: Upgrade to version 2006.21 or higher.
CVE-2007-3927
Opera < 9.22 Torrent File Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4142 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host contains a web browser that is prone to a buffer overflow
attack.\n\nThe version of Opera installed on the remote host reportedly contains a buffer
overflow vulnerability that can be triggered by a malicious Torrent file. Successful
exploitation requires that a user browse to a malicious URI and is enticed into opening a
Family Internet Services 1075