(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host may be tricked into downloading a malicious file\n\nThe
remote host is running Outlook Express 5.0 for MacOS. This version of Express will
automatically download attachments to HTML messages, without prompting the user. This
weakness does not allow for a means of forcing the user to execute any code, or place files
in a specific folder, but could be used in conjunction with other attacks.
Solution: Upgrade to the latest version.
CVE Not available
Microsoft Outlook 98 / Outlook Express 4.x Long Filename Vulnerability
PVS ID: 1294 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running a version of Outlook they may be vulernable to a buffer overflow. Specifically if
an attacker sends an attachment with a very long filename, they may be able to execute
arbitrary code and/or crash the victim machine.
Solution: Apply patches available from Microsoft website.
CVE-2000-0415
Mutt < 1.4.1 / 1.5 IMAP Remote Folder Buffer Overflow Vulnerabilities
PVS ID: 1295 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote
host is running a version of the Mutt email client that may be vulnerable to a
buffer overrun. A specially crafted folder on an IMAP server may be able to
trigger these overflow conditions and cause the mutt client to crash.
Solution: Upgrade to either 1.4.1 or 1.5. Patches/upgrades are available at www.mutt.org
CVE-2003-0167
Mutt < 1.4.1 / 1.5 UTF-7 IMAP Remote Folder Buffer Overflow Vulnerability
PVS ID: 1296 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running a version of the Mutt email client that may be vulnerable to a buffer overrun.
Specifically, it has been reported that Mutt does not handle remote internationalized folders
properly. Because of this, it is possible for a malicious server to launch an attack that could
result in the execution of code as the mutt user.
Solution: Upgrade to either 1.4.1 or 1.5. Patches/upgrades are available at www.mutt.org
CVE-2003-0140
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 331