(PVS) Signatures - Tenable Network Security

Solution: Upgrade to Merak Mail Server 7.5.2 or higher if you are using the Web Mail module.
CVE-2004-1721
Merak Mail Server < 7.5.2 Web Mail Module Multiple Vulnerabilities
PVS ID: 2158 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running Merak Mail Server. It is reported that versions prior
to 7.5.1 are prone to multiple vulnerabilities in the Web Mail module. An attacker may use
these vulnerabilities to perform cross-site scripting attacks, SQL injection and access to the
PHP source code.
Solution: Upgrade to Merak Mail Server 7.5.2 or higher if you are using the Web Mail module.
CVE-2004-1721
Gaim < 0.82 Multiple Overflows
PVS ID: 2159 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host
appears to be running Gaim, a popular open-source multi-protocol instant messenger. It is
reported that this version of Gaim is prone to multiple vulnerabilities including several
buffer and heap overflows. These vulnerabilities may permit an attacker to execute
arbitrary code on the remote computer.
Solution: Upgrade to Gaim 0.82.0 or higher.
CVE-2004-0785
Gaim < 0.82 MSN Protocol Buffer Overflow
PVS ID: 2160 FAMILY: Internet Messengers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host
appears to be running Gaim, a popular open-source multi-protocol instant messenger. It is
reported that this version of Gaim is prone to several buffer overflows in the MSN protocol
implementation. This vulnerability may permit an attacker to execute arbitrary code on the
remote computer.
Solution: Upgrade to Gaim 0.82.0 or higher or disable the MSN protocol module.
CVE-2004-0500
Passive Vulnerability Scanner (PVS) Signatures
Gaim / Ultramagnetic Multiple Security Vulnerabilities
PVS ID: 2161 FAMILY: Internet Messengers NESSUS ID:Not Available
Family Internet Services 539