(PVS) Signatures - Tenable Network Security

PVS ID: 5557 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:46783
Description: Synopsis :\n\nThe remote mail server is vulnerable to multiple attack vectors.\n\nThe
remote host is running Exim, a message transfer agent. For your information, the observed
version of Exim is %L.\n\nVersions of Exim earlier than 4.72 are potentially affected by
multiple vulnerabilities :\n\n - An error when handling hardlinks within the mail directory
during the email delivery process can be exploited to perform unauthorized actions.
(CVE-2010-2023)\n\n - When MBX locking is enabled, a race condition exists which could
allow an attacker to change permissions of other non-rot users' files, leading to
denial-of-service conditions or potentially privilege escalation. (CVE-2010-2024)
Solution: Upgrade to Exim 4.72 or later when it becomes available.
CVE-2010-2024
Mozilla Thunderbird Version Detection
PVS ID: 5558 FAMILY: SMTP Clients RISK: INFO NESSUS ID:Not Available
Description: N/A
Solution: N/A
CVE Not available
OpenSSL < 0.9.8o / 1.0.0a Multiple Vulnerabilities
PVS ID: 5559 FAMILY: Web Servers RISK: HIGH NESSUS ID:46801
Description: Synopsis :\n\nThe remote web server is vulnerable to multiple attack vectors.\n\nFor your
information, the observed version of OpenSSL is %L.\n\nVersions of OpenSSL earlier than
0.9.8o and 1.0.0a are potentially affected by multiple vulnerabilities :\n\n - CMS structures
containing 'OriginatorInfo' are mishandled which can cause the application to write to
invalid memory addresses or free up memory twice. Note that this only affects OpenSSL
with CMS code present. (CVE-2010-0742)\n\n - When verification recovery fails for RSA
keys, an uninitialized buffer with an undefined length is returned instead of an error code.
Note that this only affects OpenSSL 1.0.0. (CVE-2010-1633)
Solution: Upgrade to OpenSSL 0.9.8o, 1.0.0, or later.
CVE-2010-1633
MySQL Version Detection
PVS ID: 5560 FAMILY: Database RISK: INFO NESSUS ID:Not Available
Description: N/A
Solution: N/A
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 1489