(PVS) Signatures - Tenable Network Security

Netscape Messaging Server IMAP LIST Command Remote Overflow
PVS ID: 1092 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:10580
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThere may be a buffer
overflow in the remote imap server which allows an authenticated user to obtain a remote
shell.
Solution: Upgrade to the latest version.
CVE-2000-0961
UoW imapd (UW-IMAP) Multiple Command Remote Overflows
PVS ID: 1093 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:10374
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThere is a buffer
overflow in the remote imap server which allows an authenticated user to obtain a remote
shell.
Solution: Upgrade imap-2000 or higher.
CVE-2000-0284
MDaemon IMAP Service CREATE Command Mailbox Name Handling Overflow
PVS ID: 1094 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:11577
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nIt is possible to crash
the remote MDaemon server by supplying an oversized argument to the CREATE imap
command. An attacker may use this flaw to prevent other users from fetching their email. It
will also crash other MDaemon services (SMTP, POP), thus preventing this server from
receiving any email as well, or even to execute arbitrary code on this host with the
privileges of the mdaemon IMAP daemon.
Solution: Upgrade to MDaemon 6.7.10 or later.
CVE-2003-1470
Mozilla IMAP Client literal_size Remote Overflow
PVS ID: 1095 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote e-mail
client is Mozilla 1.3 or 1.4a which is vulnerable to a boundary condition error whereby a
malicious IMAP server may be able to crash or execute code on the client.
Solution: Upgrade to either 1.3.1 or 1.4a.
CVE-2003-0298
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 279