(PVS) Signatures - Tenable Network Security

Ximian Evolution < 1.2.3 UUEncoding Overflow DoS / Data Injection
PVS ID: 1307 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack and data
injection.\n\nThe remote host is running a version of the Ximian Evolution email client that
may be vulnerable to a Denial of Service attack or data injection. The Evolution mail client
supports uuencoded content and decodes it automatically when a message is initially
parsed. An attacker may be able to send a malformed message that will crash the mail
client. Because Evolution automatically decodes uuencoded messages, the presence of the
malformed message may cause a Denial of Service attack as the user will be unable to
remove the message from her mailbox.
Solution: Upgrade to Evolution 1.2.3 or higher.
CVE-2003-0130
Ximian Evolution < 1.2.3 MIME image/* Content-Type Data Injection
PVS ID: 1308 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may be tricked into running an executable file\n\nThe
remote host is running a version of the Ximian Evolution email client that does not properly
validate MIME image/* Content-Type fields. If an email message contains an image/*
Content-Type, any type of data can be embedded where the image information is expected.
This can be used to embed HTML tags that will be rendered by GTKHtml, bypass policies,
or invoke bonobo components to handle external content types.
Solution: Upgrade to Evolution 1.2.3 or higher.
CVE-2003-0130
Mozilla Predictable Temporary File Symbolic Link Arbitrary File Overwrite
PVS ID: 1309 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a local flaw in the way that it creates
temporary files.\n\nThe remote host is running a version of the Mozilla browser that
follows symbolic links on lock files created in the /tmp directory, allowing a local attacker
to create arbitrary files in the security context of the Mozilla user.
Solution: Upgrade to the latest version of Mozilla
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Netscape/Mozilla Null Character Cookie Disclosure
PVS ID: 1310 FAMILY: SMTP Clients RISK: LOW NESSUS ID:Not Available
Family Internet Services 335