(PVS) Signatures - Tenable Network Security

CVE-2004-2501
WS_FTP Server < 5.04 Multiple Vulnerabilities (2)
PVS ID: 2436 FAMILY: FTP Servers RISK: HIGH NESSUS ID:15857
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThis host is running a
vulnerable version of WS_FTP Server. Versions up to and including 5.03 are reported
prone to multiple buffer overflows that may be used by an attacker to execute arbitary code
on the remote system.
Solution: Upgrade to version 5.04 or higher.
CVE-2004-1135
JanaServer < 2.4.5 Multiple Remote DoS
PVS ID: 2437 FAMILY: Web Servers RISK: HIGH NESSUS ID:15862
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a version of JanaServer that is vulnerable to various denial of service
issues.\nAn attacker may exploit these vulnerabilities by sending a malformed request to
the remote service and cause it to enter an infinite loop, thus refusing connections and using
100% of the CPU of the remote host.
Solution: Upgrade to JanaServer 2.4.5 or higher.
CVE Not available
Mercury Mail Remote IMAP Stack Buffer Overflow
PVS ID: 2438 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Mercury Mail server, an IMAP server for Windows operating systems. It is
reported that versions up to and including 4.01 are prone to stack buffer overflow
vulnerabilities. An authenticated attacker may execute arbitrary code on the remote server.
The attacker needs to authenticate in order to exploit these vulnerabilities against the IMAP
server.
Solution: No solution is known at this time.
CVE-2004-1211
YaBB Shadow BBCode Tag XSS
PVS ID: 2439 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:15859
Family Internet Services 618