(PVS) Signatures - Tenable Network Security

queries, possibly revealing sensitive information, launching attacks against the underlying
database, and the like.
Solution: Upgrade to version 1.3.0 or higher.
CVE-2005-2383
Alt-N MDaemon < 8.0.4 IMAP Multiple Buffer Overflows
PVS ID: 3105 FAMILY: Web Servers RISK: HIGH NESSUS ID:19252
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running Alt-N MDaemon, a SMTP/IMAP server for the Windows operating system family.
It is reported that versions up to and including 8.0.3 are prone to multiple buffer overflow
vulnerabilities. An attacker may cause a denial of service or execute arbitrary code on the
remote server. The attacker does not need credentials to exploit the flaw in
CRAM-MD5/LOGIN authenticate method.
Solution: Upgrade to version 8.0.4 or higher.
CVE Not available
GoodTech SMTP Server < 5.17 'RCPT TO' Command Remote Overflow
PVS ID: 3106 FAMILY: SMTP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running the GoodTech SMTP server. This version of GoodTech is vulnerable to a remote
buffer overflow. An attacker exploiting this flaw would send a malformed 'RCPT TO'
request to the SMTP server. Successful exploitation would result in the attacker running
arbitrary code on the remote system.
Solution: Upgrade to version 5.17 or higher.
IRC Server Detection
CVE-2005-2387
PVS ID: 3107 FAMILY: IRC Servers RISK: INFO NESSUS ID:Not Available
Description: The remote host is an IRC server.
Solution: Ensure that such services are authorized for your network
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
ClamAV < 0.86.2 Content-parsing Multiple Overflows
PVS ID: 3108 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Family Internet Services 792