(PVS) Signatures - Tenable Network Security

Solution: Upgrade to Hastymail 1.0.2 or 1.2.0 or higher.
CVE-2004-2704
Nakedsoft Gaucho < 1.4.0 Build 151 Content-Type Header Overflow
PVS ID: 2168 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using Nakedsoft Gaucho, an email client for Microsoft Windows. It is reported that this
version of the software is prone to a buffer overflow in its mail headers processing
function. An attacker may craft a malicious email that could execute arbitrary code on the
remote host.
Solution: Upgrade to Gaucho 1.4.0 build 151 or higher.
CVE-2004-1752
Gecko-based Browsers for MacOS X Content Spoofing
PVS ID: 2169 FAMILY: Web Clients RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Script Injection attack.\n\nThe remote host
appears to be running a Gecko-based browser under the MacOS X operating system. It
could be Mozilla, Camillo, Netscape or Firefox. This version of the software is vulnerable
to a content spoofing issue because of a flaw in the third-party plug-in management. An
attacker may write a malicious plug-in (or a Java applet) that may misrepresent or spoof the
content of a alternate tab.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-1753
4D WebStar < 5.3.3 FTP Pre-Authentication Overflow
PVS ID: 2170 FAMILY: Web Servers RISK: HIGH NESSUS ID:14195
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote server is
running 4D WebStar. There is a buffer overflow condition in the FTP server module of the
remote version of this software. An attacker may exploit this flaw to execute arbitrary code
on the remote host with the privileges of the FTP server (root).
Solution: Upgrade to 4D WebStar 5.3.3 or higher.
CVE-2004-0695
4D WebStar < 5.3.3 Information Disclosure
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2171 FAMILY: Web Servers NESSUS ID:14196
Family Internet Services 542