(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host has the EXPN command enabled. An attacker may use it to
enumerate valid accounts on this host and gain more information about them.
Solution: Disable this option in your MUA configuration file.
CVE Not available
Sendmail < 8.10.1 ETRN Command Remote DoS
PVS ID: 2024 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote SMTP server has a flaw that may allow remote attackers to cause a denial of service
by sending a series of ETRN commands and then disconnecting from this server.
Solution: Upgrade to Sendmail 8.10.1 or higher.
CVE-1999-1109
Sendmail < 8.12.5 DNS Map TXT Query Overflow
PVS ID: 2025 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:11232
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Sendmail
server is vulnerable to a buffer overflow in the portion of its code that handles DNS replies.
The owner of a malicious DNS server could use this flaw to execute arbitrary code on this
host.
Solution: Upgrade to Sendmail 8.12.5 or higher.
CVE-2002-0906
Sendmail 'decode' Alias Arbitrary File Overwrite
PVS ID: 2026 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:10248
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote Sendmail server may pipe email sent to the 'decode' alias to a
program, which is prone to various security issues.
Solution: Remove the 'decode' entry from /etc/aliases.
CVE-1999-0096
Passive Vulnerability Scanner (PVS) Signatures
Sendmail ResrictQueueRun Debug Information Disclosure
PVS ID: 2027 FAMILY: SMTP Servers RISK: LOW NESSUS ID:11088
Family Internet Services 517