(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote Sendmail
server may be vulnerable to a remote buffer overflow that can be exploited by an attacker
to gain a root shell on this host.
Solution: Upgrade to Sendmail 8.12.9 or higher.
CVE-2003-0161
Sendmail HELO Command Overflow
PVS ID: 2032 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:10260
Description: Synopsis :\n\nThe remote mail server may inadvertently allow anonymous emails.\n\nThe
remote Sendmail server accepts too long arguments to the HELO command, which may
allow attackers to send email anonymously.
Solution: Upgrade or patch according to vendor recommendations.
CVE-1999-1015
Microsoft Exchange IMC SMTP EHLO Hostname Overflow
PVS ID: 2033 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:11053
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nA security
vulnerability results because of an unchecked buffer in the IMC code that generates the
response to the EHLO protocol command. If the buffer were overrun with data it would
result in either the failure of the IMC or could allow the attacker to run code in the security
context of the IMC, which runs as Exchange 5.5 Service Account.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2002-0698
TFS SMTP < 4.0 Build 210 MAIL FROM Remote Overflow
PVS ID: 2034 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:10284
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote SMTP
server (TFS SMTP) is vulnerable to a buffer overflow when it is issued a too long argument
to the 'MAIL FROM' SMTP command. An attacker may exploit this vulnerability to run
arbitrary commands on the remote SMTP server with the privileges of the SMTP daemon
(typically, SYSTEM).
Solution: Upgrade to TFS SMTP 4.0 Build 219 or higher.
CVE-1999-1516
Passive Vulnerability Scanner (PVS) Signatures
Xtramail SMTP Multiple Command Remote Overflows
PVS ID: 2035 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:10324
Family Internet Services 519