(PVS) Signatures - Tenable Network Security

Solution: Upgrade to the latest version of Elm (available at www.instinct.org/elm)
Pegasus Mail <
CVE Not available
PVS ID: 1301 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Pegasus 3.11 mail client which contains a vulnerability, where if more than
approximately 90KB of binary data is placed in the body of a message, an overflow will
occur, causing the program to crash and/or allowing for the execution of arbitrary code.
Solution: Upgrade to the latest version of Pegasus.
Pegasus Mail <
CVE-2000-0931
PVS ID: 1302 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may be tricked into uploading confidential files to a
malicious webserver.\n\nThe remote host is running the Pegasus 3.12c mail client. This
version contains a vulnerability whereby a malicious website operator may be able to
obtain copies of known files on a remote system if a website visitor is running the 3.12c
version of the Pegasus client.
Solution: Upgrade to the latest version of Pegasus.
CVE-2000-0930
Pegasus Mail < 4.02 To/From Header Overflow DoS
PVS ID: 1303 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running the Pegasus 4.01 mail client. Pegasus Mail 4.01 (and possibly earlier
versions) are vulnerable to a Denial of Service attack caused by a buffer overflow. By
sending an email message containing 259 characters or more in either the "From" or "To"
message header, a remote attacker can overflow a buffer and crash the system.
Solution: Upgrade to Pegasus Mail 4.02 or higher.
CVE-2002-1075
Lotus Notes R5 S/MIME Message Modification Warning Failure
PVS ID: 1304 FAMILY: SMTP Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 333