(PVS) Signatures - Tenable Network Security

PVS ID: 2425 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nAccording to its
banner, the remote Cyrus IMAPD server is vulnerable to a pre-login buffer overflow. Cyrus
IMAP server is also vulnerable to three other buffer overflows after authentication. An
attacker with or without a valid login could exploit these issues, and would be able to
execute arbitrary commands as the owner of the Cyrus process.
Solution: Upgrade to Cyrus IMAPD 2.2.10 or higher.
CVE-2004-1067
Nullsoft Winamp < 5.0.7 IN_CDDA.dll Remote Buffer Overflow
PVS ID: 2426 FAMILY: Generic RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote client is
running a version of the Nullsoft Winamp media player that may be vulnerable to a remote
buffer overflow. This vulnerability may be used to remotely execute arbitrary code on the
host by invoking a malicious playlist. IN_CDDA.dll will fail to parse it correctly and an
attacker will be able to exploit the buffer overflow.
Solution: Upgrade to Winamp 5.0.7 or higher.
CVE-2004-1119
Van Dyke SecureCRT < 4.1.9 Telnet URI Remote Command Execution
PVS ID: 2427 FAMILY: SSH
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a vulnerable version of SecureCRT, a SSH/Telnet client built for Microsoft Windows
operating systems. It has been reported that SecureCRT does not safely check the protocol
handler. As a result, an attacker may be able to exploit it by setting up a malicious SMB
share.
Solution: Upgrade to SecureCRT 4.1.9 or higher.
CVE-2004-1541
ProZilla Multiple Remote Buffer Overflows
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2428 FAMILY: Internet Messengers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is using Prozilla, a download accelerator for Linux and Unix systems. The remote version
of this software contains multiple security issues that may allow an attacker to execute code
on the remote host.\nAn attacker needs to create a malicious HTTP server and entice the
user to download a file on this server.
Family Internet Services 615