(PVS) Signatures - Tenable Network Security

not exist, then the server may crash. At the least, this would cause a Denial of Service
(DoS) against the service and attached users.
Solution: No solution is known at this time.
CVE-2005-0657
Mozilla < 1.7.6 Multiple Vulnerabilities
PVS ID: 2671 FAMILY: Web Clients RISK: HIGH NESSUS ID:17604
Description: Synopsis : \n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is using Mozilla, a web browser. The remote version of this software contains
the following security flaws: \n1) There is a flaw in the way that the browser handles
scripting within 'tabbed' cross-domains. An attacker exploiting this flaw would need to be
able to convince a user to click on a malicious URL which would then open a separate
'TAB' within the browser. The attacker could then retrieve data relevant to other tabbed
connections or execute code locally.\n2)There is a flaw in the default about: config script
that would allow an attacker to modify configuration data. In order to execute such an
attack, the attacker would need to be able to entice the user into visiting or clicking on a
malicious URL. A successful attacker would be able to modify the local configuration file,
resulting in enhanced access rights or other potential exploits. In addition, there are other
unconfirmed flaws in Mozilla version 1.7.5 and lower. The reported browser version (as
seen on the network) is: \n %L
Solution: Upgrade to Mozilla 1.7.6 or higher.
CVE-2005-0231
Sylpheed < 1.0.3 Invalid Header Overflow
PVS ID: 2672 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote client is
running Sylpheed, an email client for Unix and Unix-like operating systems. This version is
vulnerable to a buffer overflow via invalid headers. Specifically, if a specially crafted email
message is replied to, a buffer overflow may occur on the local machine. To exploit this, an
attacker would need to be able to craft an email and entice a local user to both read and
reply to the email. Successful exploitation would result in the attacker executing arbitrary
code on the remote client.
Solution: Upgrade to version 1.0.3 or higher.
CVE Not available
Stadtaus Form Mail < 2.4 formmail.inc.php Remote File Inclusion
PVS ID: 2673 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:17285
Family Internet Services 684