(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running YoungZSoft CMail Server, a mail server for
Microsoft Windows. There are multiple remote vulnerabilities such as buffer overflows,
SQL injection, and HTML injection in the remote version of this software that may allow
an attacker to execute arbitrary code on the remote host.
Solution: Upgrade to version 5.2.1 or higher.
CVE-2004-1129
KorWeblog < 1.6.2 Remote Directory Listing
PVS ID: 2433 FAMILY: CGI RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is using KorWeblog, a web-based log application written in
PHP. A vulnerability exists in the remote version of this product that may allow a remote
attacker to disclose directory listings. Information disclosures could help the attacker in
further attacks.
Solution: Upgrade to version 1.6.2 or higher.
CVE-2004-1427
Open DC Hub RedirectAll Value Remote Buffer Overflow
PVS ID: 2434 FAMILY: Peer-To-Peer File Sharing
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of Open DC Hub, a peer to peer file sharing application, that is
vulnerable to a remote buffer overflow. A successful exploit would allow a remote attacker
to execute code on the remote host. It must be noted that the remote attacker needs
administrative access to this application.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2004-1127
MailEnable < 1.53 IMAP Service Multiple Remote Pre-Authentication Buffer Overflows
PVS ID: 2435 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:15852
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of MailEnable Professional that is older than version 1.53. The remote
version of this software is known to be prone to multiple remote buffer overflow
vulnerabilities that have been fixed in version 1.53.
Solution: Upgrade to version 1.53 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 617