(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote Sendmail server is vulnerable to an 'ident overflow' that may
allow a remote attacker to gain a root shell on this host.
Solution: Upgrade to version 8.6.10 or higher.
CVE-1999-0204
Sendmail < 8.12.8 Header Handling Remote Overflow
PVS ID: 2020 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:11316
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Sendmail
server is vulnerable to a remote buffer overflow that may allow an attacker to remotely gain
a root shell on this host.
Solution: Upgrade to Sendmail 8.12.8 or higher.
CVE-2002-1337
Sendmail < 8.8.4 Group Permissions Local Privilege Escalation
PVS ID: 2021 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:11349
Description: Synopsis :\n\nThe remote server may allow local users to escalate privileges.\n\nThe
remote Sendmail server is vulnerable to a flaw that may allow local users to gain the group
permission of the sendmail server by crafting a .forward file.
Solution: Upgrade to Sendmail 8.8.4 or higher.
CVE-1999-0129
EXPN Command Information Disclosure
PVS ID: 2022 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:10249
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host has the EXPN command enabled. An attacker may use it to
enumerate valid accounts on this host and gain more information about them.
Solution: Disable this option in your MUA configuration file.
CVE Not available
EXPN Command Information Disclosure
PVS ID: 2023 FAMILY: SMTP Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:10249
Family Internet Services 516