(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote Sendmail server does not properly identiy the '.\n' string which identifies the end of
message text. An attacker may use this flaw to remotely corrupt user mailboxes by sending
a message line which is 2047 characters long and end in '.\n'.
Solution: Install sendmail 8.10.0 or higher.
CVE-2000-0319
Sendmail < 8.6.8 Long Debug Local Overflow
PVS ID: 2016 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:11348
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Sendmail
server allows local users to escalate their privileges due to a buffer overflow in the debug
(-d) command line option of Sendmail.
Solution: Upgrade to Sendmail 8.6.8 or higher.
CVE-1999-1309
Eserv SMTP Memory Leak
PVS ID: 2017 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:11619
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote SMTP server is running Eserv SMTP. There is a memory leak in this software that
may be abused by an attacker to disable this service remotely.
Solution: No solution is known at this time.
CVE Not available
Sendmail < 8.11.6 Local Overflow
PVS ID: 2018 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:10729
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Sendmail
server is vulnerable to a local buffer overflow that may allow local users to gain root
privileges.
Solution: Upgrade to Sendmail 8.11.6 or higher.
CVE-2001-0653
Sendmail < 8.6.10 IDENT Remote Overflow
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2019 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:10278
Family Internet Services 515