(PVS) Signatures - Tenable Network Security

RISK:
MEDIUM
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a version of Unreal IRCD that is vulnerable to a remote denial of
service. It is reported that Unreal IRCD may crash when a client sends a raw message to
OperServ to join a channel. An attacker may use this issue to deny service to legitimate
users.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
CVS history.c File Existence Disclosure
PVS ID: 2155 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:14313
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running a CVS server that, according to its version number,
is vulnerable to an information disclosure issue. This weakness can be exploited by
malicious users to gain knowledge about files and directories existing on the server.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-0778
Merak Mail Server < 7.5.1 Web Mail Module Multiple Vulnerabilities
PVS ID: 2156 FAMILY: POP Server RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running Merak Mail Server. It is reported that versions prior
to 7.5.1 are prone to multiple vulnerabilities in the Web Mail module. An attacker may use
these vulnerabilities to perform cross-site scripting attacks, SQL injection and access to the
PHP source code.
Solution: Upgrade to Merak Mail Server 7.5.1 or higher if you are using the Web Mail module.
CVE-2004-1721
Passive Vulnerability Scanner (PVS) Signatures
Merak Mail Server < 7.5.2 Web Mail Module Multiple Vulnerabilities
PVS ID: 2157 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running Merak Mail Server. It is reported that versions prior
to 7.5.1 are prone to multiple vulnerabilities in the Web Mail module. An attacker may use
these vulnerabilities to perform cross-site scripting attacks, SQL injection and access to the
PHP source code.
Family Internet Services 538