(PVS) Signatures - Tenable Network Security

Computer Associates Message Queuing Service Buffer Overflow
PVS ID: 3284 FAMILY: Generic RISK: HIGH NESSUS ID:20173
Description: Synopsis :\n\nArbitrary code can be executed on the remote host due to a flaw in the
Message Queuing service.\n\nThe remote version of Computer Associates Message
Queuing Service contains a stack overflow in the 'log_security' function that may allow an
attacker to execute arbitrary code on the remote host. This version is also prone to :\n-
Denial of Service on the TCP port 4105\n- arbitrary code execution through spoofed CAFT
packets\nAn attacker does not need to be authenticated to exploit this flaw.
Solution: Refer to http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp
CVE-2005-2668
Sylpheed < 2.0.4 Address Book LDIF Import Overflow
PVS ID: 3285 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote client is
running Sylpheed, an email client for Unix and Unix-like operating systems. This version is
vulnerable to a buffer overflow via specially crafted email messages. An attacker exploiting
this flaw would need to be able to convince a user to open a malicious email message and
importing an attached LDIF file into their address book. Successful exploitation would lead
to a Denial of Service or remote code execution.
Solution: Upgrade to version 2.0.4 or higher.
CVE-2005-3354
RealPlayer for Windows Multiple Overflows (2)
PVS ID: 3286 FAMILY: Web Clients RISK: HIGH NESSUS ID:20184
Description: Synopsis :\n\nThe remote Windows application is affected by several overflow
vulnerabilities.\n\nThe installed version of RealPlayer / RealOne Player / RealPlayer
Enterprise for Windows on the remote host is prone to buffer overflow and heap overflow
vulnerabilities. An attacker may be able to leverage these issues to execute arbitrary code
on the remote host subject to the permissions of the user running the affected application.
Note that a user doesn't necessarily need to explicitly access a malicious media file since
the browser may automatically pass RealPlayer skin files (ie, files with the extension '.rjs')
to the application.
Solution: See http://service.real.com/help/faq/security/memory.html
CVE-2005-2629
Lynx < 2.8.6 dev15 Arbitary Code Execution
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3287 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Family Internet Services 846