(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a remote 'format string' flaw.\n\nThe remote
host is running the Cherokee web server. This version is vulnerable to a remote format
string overflow. An attacker exploiting this flaw would only need to be able to connect to
the web server and issue an HTTP 'GET' request. Upon successful exploitation, the attacker
would be able to execute commands within the context of the web server.
Solution: Upgrade to version 0.4.17.1 or higher.
CVE-2004-1097
MailEnable SMTP Server < 1.5.1 Undisclosed Vulnerabilities
PVS ID: 2384 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:15611
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is running a version of MailEnable Professional that is older than version 1.5.1.
The remote version of this software is known to be prone to an undisclosed vulnerability
that has been fixed in version 1.5.1.
Solution: Upgrade to version 1.5.1 or higher.
CVE Not available
ArGoSoft FTP Server < 1.4.2.2 Shortcut File Upload
PVS ID: 2385 FAMILY: FTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows attackers to retrieve
sensitive files or data.\n\nThe remote host is running the ArGoSoft FTP Server. It is
reported that ArGoSoft FTP Server is prone to a vulnerability that allows a shortcut link
upload. An attacker exploiting this flaw may be able to have read and write access to any
files and directories on the FTP server.
Solution: Upgrade to version 1.4.2.2 or higher.
CVE-2004-1428
MailPost.exe Multiple Vulnerabilities
PVS ID: 2386 FAMILY: Web Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:15626
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is using a version of TIPS MailPost that is vulnerable to several flaws.\nTIPS MailPost is
an HTML form content email application designed to facilitate\nthe emailing of HTML
form data to a third party.\nThere are various flaws in the remote version of this software
:\n- A remote file enumeration vulnerability that may allow an attacker to determine if a file
exists or not\n\n- Two cross-site scripting vulnerabilities that may allow an attacker to steal
the cookies of third-parties users\n\n- An information disclosure vulnerability that may
allow an attacker to gain more information about the remote host
Family Internet Services 603