(PVS) Signatures - Tenable Network Security

CVE-2008-4070
MailMarshal < 6.4 Spam Quarantine Management XSS
PVS ID: 4697 FAMILY: SMTP Servers RISK: LOW NESSUS ID:34336
Description: Synopsis :\n\nThe remote host has an application that is affected by a cross-site scripting
vulnerability.\n\nThe remote host is running MailMarshal SMTP, a mail server for
Windows version '%L'. The Spam Quarantine Management web component included with
the version of MailMarshal SMTP installed on the remote host is affected by a persistent
cross-site scripting vulnerability in its 'delegated spam management' feature. By exploiting
this issue, it may be possible for an internal user to install a malicious program on another
internal user's (victim) computer, steal session cookies or launch similar attacks. Successful
exploitation would require a victim to accept an email invitation for delegated spam
management from an attacker.
Solution: Upgrade to version 6.4 or higher.
CVE-2008-2831
lighttpd < 1.4.20 Multiple Vulnerabilities
PVS ID: 4698 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:34332
Description: Synopsis :\n\nThe remote web server may be affected by several
issues.\n\nAccording to its banner, the version of lighttpd installed on the
remote host is older than 1.4.20. Such versions may be affected by
several issues, including :\n\n - SSL connections could be shut down by a
remote attacker.\n - URL rewrite and redirect patterns can be
circumvented by encoding.\n - mod_userdir does not sanitize URLs,
which could lead to an information disclosure on case insensitive file
systems e.g. http://example.com/~user/file.PHP would get the source
code of file.php, instead of running the script.\n - The server leaks
memory when it processes duplicate headers. This could lead to a denial
of service by resource exhaustion.
Solution: Upgrade to version 1.4.20 or higher.
CVE-2008-4298
Serv-U < 7.3.0.1 Multiple Remote Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 4699 FAMILY: FTP Servers RISK: HIGH NESSUS ID:34398
Description: Synopsis :\n\nThe remote FTP server is affected by several vulnerabilities.\n\nThe remote
host is running Serv-U File Server, an FTP server for Windows. The reported version
number is: '%L'\n\nThe installed version of Serv-U is earlier than 7.3.0.1 and thus is
reportedly affected by the following issues :\n - An authenticated remote attacker can cause
the service to consume all CPU time on the remote host by specifying a Windows port (eg,
Family Internet Services 1234