(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote mail server may be affected by multiple vulnerabilities.\n\nThe
installed version of Windows SMTP Service is affected by at least one vulnerability : \n\n -
Incorrect parsing of DNS Mail Exchanger (MX) resource records could cause the Windows
Simple Mail Transfer Protocol (SMTP) component to stop responding until the service is
restarted. (CVE-2010-0024)\n\n - Improper allocation of memory for interpreting SMTP
command responses may allow an attacker to read random e-mail message fragments
stored on the affected server. (CVE-2010-0025)\n\nFor your information, the observed
version of the SMTP service is : \n %L \nIAVB Reference : 2010-B-0029\nSTIG Finding
Severity : Category II
Solution: Microsoft has released a set of patches for Windows 2000, XP, 2003, and 2008.
CVE-2010-0025
RealNetworks Helix Server 11.x / 12.x / 13.x Multiple Vulnerabilities
PVS ID: 5511 FAMILY: Generic RISK: HIGH NESSUS ID:45543
Description: Synopsis : \n\nThe remote media streaming server is affected by multiple
vulnerabilities.\n\nAccording to its banner, the remote host is running version 11.x, 12.x, or
13.x of RealNetworks Helix Server / Helix Mobile Server. Such versions are potentially
affected by multiple vulnerabilities.\n\n - A heap overflow exists in the NTLM
authentication code related to invalid Base64 encoding. (CVE-2010-1317)\n\n - A
stack-based buffer overflow within AgentX++ could lead to arbitrary code execution.
(CVE-2010-1318)\n\n - An integer overflow within AgentX++ could lead to arbitrary code
execution. (CVE-2010-1319)\n\nFor your information, the observed version of Helix
Server is: \n %L
Solution: Upgrade to RealNetworks Helix Server / Helix Mobile Server 14.0.0 or later.
CVE-2010-1319
CUPS < 1.4.3 Multiple Vulnerabilities
PVS ID: 5512 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:45554
Description: Synopsis : \n\nThe remote host is running a web application that is affected by multiple
attack vectors.\n\nAccording to its banner, the version of CUPS installed on the remote host
is earlier than 1.4.3. Such versions are affected by several vulnerabilities : \n\n - A pointer
use-after-free vulnerability exists in the abstract file descriptor handling code in the
'cupsdDoSelect' function in scheduler/select.c. A remote attacker may be able to leverage
this to hang or crash the cupsd daemon by disconnecting while receiving a listing with a
large number of print jobs. (STR #3200)\n\n - The lppasswd utility, when its setuid bit is
enabled, allows a local user to escalate his or her privileges because it uses an environment
variable to override CUPS' default directories and determine the location of a file with
localized message strings. (STR #3482)\n\nFor your information, the observed version of
CUPS is: \n %L
Solution: Upgrade to CUPS version 1.4.3 or later.
Family Internet Services 1475