(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote Ventia DeskNow server allows unauthorized access to local files
and email.\n\nThe remote host is running Ventia DeskNow Mail And Collaboration Server.
Ventia DeskNow allows multiple users to chat, share files, collaborate and more via a
central Ventia DeskNow server. There is a flaw with the version of DeskNow that allows
files to be modified on the local server, email to be tampered with, and other flaws.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-0332
Savant Web Server Multiple Remote Overflows
PVS ID: 2587 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Savant Web Server. This version of Savant is vulnerable to a remote overflow due
to a long user request. An attacker exploiting this flaw would only need to be able to craft a
query to the web server.
Solution: No solution is known at this time.
CVE-2005-0338
Qualcomm Eudora < 6.2.1 Unspecified Remote Overflows
PVS ID: 2588 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is running a version of the Eudora mail client that may be vulnerable to at least
one remote buffer overflow.
Solution: Upgrade to version 6.2.1 or higher.
CVE Not available
Mambo Content Server < 4.5.1b Detection Global Variables Overwrite
PVS ID: 2589 FAMILY: Web Servers RISK: HIGH NESSUS ID:16312
Description: Synopsis :\n\nThe remote host is vulnerable to a flaw that allows for the bypassing of
authentication.\n\nThe remote host is running the Mambo Content Server, an application
for generating dynamic content for web servers. The remote application is vulnerable to a
flaw where remote attacks can overwrite global variables used by the application. In doing
so, they can alter the way that the application operates, causing a disclosure of information
or a loss of availability.
Solution: Upgrade to version 4.5.1b or higher.
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 660