(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to multiple Denial of Service (DoS)
attacks\n\nThe remote host is running SAMI FTP server. There is a bug in the way some
versions of this server handles certain FTP command requests which may allow an attacker
to trigger a remote Denial of Service (DoS) attack against the server.
Solution: Ensure that your version of SAMI FTP server is patched to the latest revision.
CVE-2004-2081
Xlight FTP Server < 1.53 RETR Command Remote Overflow
PVS ID: 1166 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:12056
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running XLight FTP server. There is a bug in the way this server handles arguments to the
RETR command that may allow an attacker to trigger a buffer overflow against this server,
potentially allowing him to disable this server remotely or to execute arbitrary code.
Solution: Upgrade XLight Server to version 1.53 or later.
CVE-2004-0255
Apache-SSL < 1.3.29 / 1.53 SSLVerifyClient SSLFakeBasicAuth Client Certificate Forgery
PVS ID: 1167 FAMILY: Web Servers RISK: HIGH NESSUS ID:12046
Description: Synopsis :\n\nThe remote server is configured to allow a potential bypass of
authorization\n\nThe remote host is running a version of ApacheSSL which is older than
1.3.29/1.53. This version is vulnerable to a flaw which may allow an attacker to make the
remote server forge a client certificate.
Solution: Upgrade to version ApacheSSL 1.3.29/1.53 or later.
CVE-2004-0009
Serv-U FTP Server < 4.2 SITE CHMOD Command Handling Overflow
PVS ID: 1168 FAMILY: FTP Servers RISK: HIGH NESSUS ID:12037
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running Serv-U FTP server. There is a bug in the way this server handles arguments to the
SITE CHMOD requests which may allow an attacker to trigger a buffer overflow against
this server, which may allow him to disable this server remotely or to execute arbitrary
code on this host.
Solution: Upgrade Serv-U FTP Server version 4.2 or later.
CVE-2004-2533
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 297