(PVS) Signatures - Tenable Network Security

Description: The remote qpopper service may be vulnerable to a denial of service (DoS) attack. If a
string of longer than approximately 2048 characters is sent to the qpopper process, a denial
of service condition will occur.
Solution: Upgrade to the newest version.
CVE-2002-0454
Qualcomm Qpopper Remote Overflows
PVS ID: 1793 FAMILY: POP Server RISK: HIGH NESSUS ID:10184
Description: There are buffer overflow vulnerabilities present in 3.x versions of the Qualcomm popper
daemon. These vulnerabilities are remotely executable and since the daemons run as root,
the host running qpopper can be completely compromised anonymously.
Solution: Upgrade to the newest version.
CVE-2002-1781
Qualcomm Qpopper Username Remote Overflow
PVS ID: 1794 FAMILY: POP Server RISK: HIGH NESSUS ID:10184
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nIn version 4, a buffer
overflow was introduced into the qpopper source tree. This buffer overflow is related to the
handling of the client-supplied username and is present when a POP3 session is being
initiated. It is believed that the overflow occurs before authentication, so it may not be
required that users have valid POP accounts. This vulnerability can lead to a compromise of
root privileges to remote attackers.
Solution: Upgrade to the latest version.
CVE-2001-1046
Computalynx CMail POP3 Server DELE Function DoS
PVS ID: 1795 FAMILY: POP Server
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a denial of service (DoS) attack.\n\nIt has
been reported that a memory corruption vulnerability exists in CMail. The POP3 server
included with CMAIL does not properly handle some types of requests. By submitting a
maliciously crafted request to the POP3 server, an attacker could crash the system, resulting
in a denial of service.
Solution: Upgrade to the latest version.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 456