(PVS) Signatures - Tenable Network Security

In addition, there is a local client flaw within the FileZilla server component. A local user
on the FileZilla server who is enticed to initiate an FTP connection to a malicious server
can be exploited.
Solution: Upgrade to version 0.9.6 or higher.
CVE-2005-0850
NetWin SurgeMail < 3.0.0c2 Multiple Remote Unspecified Vulnerabilities
PVS ID: 2739 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:17594
Description: Synopsis :\n\nThe remote host is missing a critical security patch or upgrade.\n\nThe
remote host is running NetWin SurgeMail, a mail server application. The remote version of
this software is vulnerable to multiple unspecified vulnerabilities that have been disclosed
by the vendor.
Solution: Upgrade to NetWin SurgeMail 3.0.0c2 or higher.
CVE Not available
DeleGate < 8.11.1 Multiple Remote Overflows
PVS ID: 2740 FAMILY: POP Server RISK: HIGH NESSUS ID:17599
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nDelegate is reportedly
vulnerable to a stack-based buffer overflow that may allow for the execution of arbitrary
code. The details of this vulnerability are not known at this time.
Solution: Upgrade to version 8.11.1 or higher.
CVE-2005-0861
Sun Cobalt RAQ Server Detection
PVS ID: 2741 FAMILY: Web Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote server is running the Sun Cobalt RaQ appliance. The web-based
administrative access is enabled and functioning. An attacker can use the web interface to
brute force login credentials off of the appliance.
Solution: Ensure that the administrative interface is only available to internal (non-Internet)
browsers.
CVE Not available
Endymion MailMan Detection
PVS ID: 2742 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Family Internet Services 705