(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThere is a buffer
overflow in the remote imap server which allows an authenticated user to obtain a remote
shell. By supplying an overly long tag the the BODY command, an attacker may gain a
shell on this host.
Solution: Upgrade to imap-2001a
CVE-2002-0379
Atrium MERCUR Mailserver Local Traversal Arbitrary File Access
PVS ID: 1089 FAMILY: IMAP Servers
RISK:
MEDIUM
NESSUS ID:10382
Description: Synopsis :\n\nThe remote system is vulnerable to an information disclosure flaw\n\nThe
remote imap server is Mercur Mailserver 3.20. There is a flaw in this server (present up to
version 3.20.02) which allows any authenticated user to read any file on the system. This
includes other users mailboxes, or any system file. Warning : this flaw has not been
actually checked but was deduced from the server banner
Solution: There was no solution ready when this vulnerability was written; Please contact the vendor
for updates that address this vulnerability.
CVE-2000-0318
Ipswitch IMail 5.0 Multiple Remote Overflows
PVS ID: 1090 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:10123
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nA buffer overflow in
the remote IMAP server allows an intruder to execute arbitrary code on this host.
Solution: Upgrade your IMAP server to the newest version.
CVE-1999-1557
Yak! FTP Server Default Credentials
PVS ID: 1091 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote FTP Server is running with known default credentials\n\nYak
uses the FTP protocol to transfer files. Yak UserID and/or password may be a static value.
Versions prior to 2.1.0 have known default credentials. An attacker can use this flaw to
send arbitrary data to client machines.
Solution: Change the password for the default 'Yak' account.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 278