(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that may allow attackers to execute
arbitrary commands\n\nsmrsh (supplied by Sendmail) is designed to prevent the execution
of commands outside of the restricted environment. However, when commands are entered
using either double pipes (||) or a mixture of dot and slash characters, a user may be able to
bypass the checks performed by smrsh. This can lead to the execution of commands outside
of the restricted environment.
Solution: Upgrade to Sendmail 8.12.8 or higher.
CVE-2002-1337
MS SMTP NULL Session Mail Relay
PVS ID: 2040 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:11308
Description: Synopsis :\n\nThe remote SMTP server may be inappropriately used as a relay.\n\nIt is
possible to authenticate to the remote SMTP service by logging in as a NULL session. An
attacker may exploit this flaw to use your SMTP server as a spam relay.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2002-0054
ISMail < 1.4.5 Multiple Command Domain Name Handling Overflow
PVS ID: 2041 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:11272
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running ISMail, a SMTP server that is vulnerable to a buffer overflow. An attacker may
exploit this flaw to gain LOCALSYSTEM privileges on this host.
Solution: Upgrade to version 1.4.5 or higher.
CVE Not available
Youngzsoft CMailServer < 4.0.2003.03.30 RCPT TO Overflow
PVS ID: 2042 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of CMailServer that is vulernable to a buffer overflow. An attacker may
use this flaw to cause CMailServer to crash or execute arbitrary code.
Solution: Upgrade to version 4.0.2003.03.30 or higher.
CVE-2003-0280
Passive Vulnerability Scanner (PVS) Signatures
Sendmail < 8.12.10 prescan() Function Remote Overflow
PVS ID: 2043 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:11838
Family Internet Services 521