(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a remote Denial of Service (DoS)
attack.\n\nThe remote server is running 4D WebStar Web Server. The remote server is
reported to be vulnerable to a Denial of Service (DoS) attack via the IMAP service.
Solution: Upgrade to version 5.3.5 or higher.
CVE-2005-3143
MailEnable STATUS Command Overflow
PVS ID: 3250 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:19783
Description: Synopsis :\n\nThe remote IMAP server is prone to buffer overflows.\n\nThe remote host is
running a version of MailEnable's IMAP service that is prone to a buffer overflow
vulnerability triggered when processing a STATUS command with a long mailbox name.
Once authenticated, an attacker can exploit this flaw to execute arbitrary code subject to the
privileges of the affected application. In addition, the version of MailEnable is vulnerable
to an IMAP directory traversal flaw. An attacker exploiting this flaw would need to be able
to log into the server and issue a malformed ('../') request. Successful exploitation would
result in the attacker accessing confidential data.
Solution: Upgrade to MailEnable Professional 1.7 or higher or to MailEnable Enterprise Edition 1.2
or higher.
CVE-2005-3155
UW-IMAP Quote String Buffer Overflow
PVS ID: 3251 FAMILY: IMAP Servers RISK: LOW NESSUS ID:Not Available
Description: Synopsis :\n\nThe IMAP server is vulnerable to an overflow after authentication.\n\nThere
is a flaw in the remote UW-IMAP server that allows an authenticated user to execute
arbitrary code on the server. The flaw is in the way that UW-IMAP handles quoted mailbox
names. Specifically, an attacker supplying a long mailbox name which only contained one
'"' would be able to overwrite memory and execute arbitrary code.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-2933
PHPMyAdmin Multiple Script usesubform Parameter Remote File Inclusion
PVS ID: 3252 FAMILY: CGI
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:19950
Description: Synopsis :\n\nThe remote web server contains a PHP application that is prone to
information disclosure attacks.\n\nThe version of phpMyAdmin installed on the remote
host allows attackers to read arbitrary files because of its failure to sanitize the parameter
'usesubform' before using it in several scripts.
Family Internet Services 836