(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote web browser may be tricked into passing browsing information
to a malicious website.\n\nThe remote host is running a version of the Mozilla browser that
may allow access to information in other browser windows. Upon the execution of code
through the 'onclick' property, a violation in browser security zone policy would occur that
allows the original web site to view the contents of web pages in other browser windows.
Solution: Upgrade to the latest version of Mozilla.
CVE Not available
Qualcomm Eudora Attachment Filename Handling Overflow
PVS ID: 1324 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of the Eudora mail client that may be vulnerable to a buffer overflow
when an attachment containing many dots is received. Exploitation of this vulnerability will
crash the Eudora client and may allow for the execution of arbitrary code.
Solution: Upgrade to the latest version of the mail client.
CVE Not available
Microsoft Outlook Remote Buffer Overflow
PVS ID: 1325 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow\n\nThe remote host is
running a version of the Microsoft Outlook mail client that may be vulnerable to a buffer
overflow. Specifically, it may be possible for a malicious IMAP server to send a specially
crafted message to the Outlook client that will cause the exection of arbitrary code in the
security context of the user.
Solution: Upgrade to the latest version of the mail client.
CVE Not available
Pine < 4.58 Multiple Overflows
PVS ID: 1326 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to an arbitrary 'command insertion'
flaw.\n\nPine versions 4.56 and below suffer from a vulnerability which allows an attacker
to force the client to execute the attacker's code on the client's system. This issue is easily
exploitable since the client will send it's version number by default allowing an attacker to
easily identify potential targets.
Solution: Upgrade to Version 4.58 or higher
CVE-2003-0720
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 340