(PVS) Signatures - Tenable Network Security

Computalynx CMail < 2.4.10 HELO Command Overflow
PVS ID: 1796 FAMILY: POP Server RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nA security
vulnerability in CMail 2.4.9 allows remote attackers to overflow one of CMail's internal
buffers causing it to crash. If shellcode is provided in the overflowing buffer it may be
possible to execute arbitrary code.
Solution: Upgrade to 2.4.10 or higher.
CVE-2001-0742
ALT-N MDaemon < 6.5.0 POP Server Overflow DoS
PVS ID: 1797 FAMILY: POP Server
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nA
buffer overflow vulnerability has been reported for MDaemon. The vulnerability is due to
inadequate bounds checking one some POP server commands. An attacker can exploit this
vulnerability by submitting a very large integer value to some commands on the POP
server. This will cause the MDaemon service to crash when attempting to process the
command.
Solution: Upgrade to MDaemon 6.5.0 or higher.
CVE-2002-1539
Xtramail < 1.12 POP3 Overflow
PVS ID: 1798 FAMILY: POP Server RISK: HIGH NESSUS ID:10325
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Xtramail
POP server is vulnerable to a buffer overflow when the user supplies a long password
string. An attacker may use this flaw to execute arbitrary code on this host with the
privileges of the Xtramail server (typically, SYSTEM).
Solution: Upgrade to version 1.12 or higher.
CVE-1999-1511
Passive Vulnerability Scanner (PVS) Signatures
Xtramail < 1.12 Control Server Overflow Denial of Service
PVS ID: 1799 FAMILY: POP Server RISK: HIGH NESSUS ID:10323
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Xtramail
Control Server is vulnerable to a buffer overflow when a user supplies a too long argument
to as its username. An attacker may use this flaw to disable this service remotely or to
execute arbitrary code on this host, with the privileges of the Xtramail server (typically,
SYSTEM).
Family Internet Services 457