(PVS) Signatures - Tenable Network Security

E-mail Client Detection
PVS ID: 1100 FAMILY: SMTP Clients RISK: NONE NESSUS ID:Not Available
Description: The remote host is running the following e-mail client: %L
Solution: N/A
CVE Not available
UoW imapd (UW-IMAP) AUTHENTICATE Command Remote Overflow
PVS ID: 1101 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:10292
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote UW-IMAP
server has a buffer overflow bug when it processes the argument of the AUTHENTICATE
command. An attacker may exploit this flaw to gain a root shell on this host
Solution: Upgrade uw-imap to its latest version.
CVE-1999-0005
WinRoute Proxy Detection
PVS ID: 1102 FAMILY: Web Clients RISK: INFO NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote proxy may pass local user credentials to a malicious external
website\n\nThe remote client is utilizing a WinRoute Proxy. Some versions of this proxy
have a bug wherein client Proxy authorization is forwarded to remote web servers. As a
result, a malicious web server can retrieve the user's Proxy UserID and password. Versions
of Winroute up to 5.1.4 are affected by this vulnerability.
Solution: Upgrade to 5.1.4 or later.
CVE Not available
Weak SSL Ciphers Supported
PVS ID: 1103 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:10863
Description: Synopsis :\n\nThe remote SSL server is configured to use weak encryption\n\nThe SSL
server allows clients to connect using weak (export grade) Ciphers. As these ciphers are
more easily cracked or hijacked, there is the potential of a remote session being taken over
or observed. There is a risk of potential loss of confidential data.
Solution: Disable weak ciphers on the TLS/SSL server.
CVE Not available
Weak SSL Ciphers Supported
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 281