(PVS) Signatures - Tenable Network Security

'calendarEdit.php' script before using it to generate dynamic HTML.\n\n - Content passed
to 'sent' parameter of the 'error413.php' script is not sanitized before being returned to the
user.\n\nSuccessful exploitation of these issues could lead to execution of arbitrary HTML
and script code in a user's browser within the security context of the affected site.\n\nThe
reported version of Kerio Mailserver is: \n %L
Solution: Upgrade to versaion 6.6.2 or higher.
CVE-2008-5769
UW-IMAP < 2007e c-client Library Overflow
PVS ID: 4798 FAMILY: IMAP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to a buffer overflow.\n\nThere is a flaw in the
remote UW-IMAP server that allows a remote user to execute arbitrary code on the server.
The flaw is in the way that UW-IMAP handles malformed data sent to the
'rfc822_output_char' function of the 'c-client' library. An attacker exploiting this flaw
would only need the ability to send malformed data to the server process. The observed
banner (with version info) was: \n %L \n
Solution: Upgrade to version 2007e or higher.
CVE-2008-5514
McAfee ePO Version Detection
PVS ID: 4799 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: The remote host is running McAfee ePO version: \n %L
Solution: N/A
CVE Not available
IceWarp Merak Mail Server < 9.4.0 IMG Tag XSS
PVS ID: 4800 FAMILY: SMTP Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:35281
Description: Synopsis : \n\nThe remote webmail server is affected by a cross-site scripting
vulnerability.\n\nThe remote host is running IceWarp Merak Mail Server, a webmail server
for Windows and Linux. According to its banner, the version of IceWarp installed on the
remote host is older than 9.4.0. Such versions reportedly fail to sanitize input passed to
'IMG' HTML tags in an e-mail message before displaying them. A remote attacker could
leverage this issue to inject arbitrary HTML and script code into a user's browser to be
executed within the security context of the affected application. The reported version of
Merak is: \n %L
Family Internet Services 1266