(PVS) Signatures - Tenable Network Security

Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a version of curl (or libcurl) that is vulnerable to a remote buffer overflows. To
exploit, an attacker would have to set up a rogue web server that would reply with a
malicious NTLM authentication request. Upon successful exploitation, the attacker would
be able to execute arbitrary commands with the rights of the web server.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-1985
XMail < 1.22.0 Multiple Overflows
PVS ID: 3257 FAMILY: POP Server RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple buffer overflow attacks.\n\nThe
remote XMail server is vulnerable to multiple remote and local buffer overflows.
Successful exploitation would lead to the attacker executing arbitrary code.
Solution: Upgrade to version 1.22.0 or higher.
CVE-2005-2943
Mozilla Thunderbird < 1.5 Multiple Vulnerabilities
PVS ID: 3258 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a vulnerable version of Mozilla Thunderbird mail client. This version of
Thunderbird is vulnerable to a Man-in-the-middle (MITM) or sniffing vulnerability where
an attacker can determine user credentials even when encryption is enabled. To exploit this
flaw, an attacker would need access to the local network. In addition, the client is
vulnerable to a flaw where attackers can spoof attachment types. An attacker exploiting this
flaw would craft a malicious email and entice a user to open a seemingly innocuous
attachment.
Solution: Upgrade to version 1.5 or higher.
CVE-2006-0236
Gallery < 2.0.1 main.php Directory Traversal Arbitrary File Access
PVS ID: 3259 FAMILY: CGI
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a directory traversal flaw.\n\nThe remote
host is running the Gallery web-based photo album. This version of Gallery is vulnerable to
a 'directory traversal' flaw. An attacker exploiting this flaw would be able to access files
outside of the webroot.
Solution: Upgrade to version 2.0.1 or higher.
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 838