(PVS) Signatures - Tenable Network Security

PVS ID: 1781 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is using software based on a vulnerable version of the Neon Library, an
open-source HTTP and WebDAV client library. It is reported that versions prior 0.24.7
contains an unspecified vulnerability. Due to the nature of the library, it is likely that this is
a remotely exploitable vulnerability.
Solution: Upgrade to Neon library 0.24.7 or higher.
CVE Not available
Opera < 7.54u1 Web Browser Resource Detection Weakness
PVS ID: 1782 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw which allows attackers to retrieve
sensitive files or data.\n\nThe remote host is using Opera, which is affected by a security
weakness which may permit an attacker to determine the existence of a resources on the
vulnerable computer.
Solution: Install Opera 7.54u1 or higher.
CVE-2004-1490
ipop2d fold Command Arbitrary File Access
PVS ID: 1783 FAMILY: POP Server
RISK:
MEDIUM
NESSUS ID:10469
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote pop2 server allows the reading of arbitrary files for
authenticated users, using the 'fold' command.
Solution: No solution is known at this time.
CVE Not available
qpopper < 3.0.1b2 EIUDL Arbitrary Command Execution
PVS ID: 1784 FAMILY: POP Server
RISK:
MEDIUM
NESSUS ID:10423
Description: Synopsis :\n\nAn attacker can gain an unprivileged shell on the remote system.\n\nThe
system is using qpopper 2.53 (or newer in the 2.5x series). There is a problem in this server
that allows users who have a pop account to gain a shell with the gid 'mail' by sending to
themselves a specially crafted mail.
Solution: Upgrade to version 3.0.1b2 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 453