(PVS) Signatures - Tenable Network Security

Description: The remote host is running the HTTPrint scanning software. HTTPrint is used to enumerate
and fingerprint HTTP servers. With any scanner software, there will always be the risk of
interruption of services due to scanning. As HTTPrint uses some non-standard HTTP
commands, it may cause some web servers to fail. Further, if the tool is used against a
non-HTTP service, it can also cause availability issues.
Solution: Ensure that this software is being used in accordance with corporate policies and
guidelines.
CVE Not available
Acunetix Web Vulnerability Scanner Detection
PVS ID: 3298 FAMILY: Policy RISK: LOW NESSUS ID:Not Available
Description: The remote host is running the Acunetix Vulnerability Scanner version: \n %L \n\nEnsure
that the usage of this scanner is in accordance with corporate security policy.
Solution: You should ensure that such a scanner is allowed by corporate policies and guidelines.
CVE Not available
WorldMail IMAP Server Directory Traversal Arbitrary Spool Access
PVS ID: 3299 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:20224
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow and a directory traversal
flaw.\n\nThe remote host is running Eudora WorldMail, a commercial email server for
Windows. This version of Worldmail is vulnerable to a remote buffer overflow due to the
way that it processes commands with multiple '}' characters. An attacker exploiting this
flaw would be able to execute arbitrary code on the target machine. In addition, the IMAP
server bundled with the version of WorldMail installed on the remote host fails to filter
directory traversal sequences from mailbox names and fails to restrict access to mailboxes
within its spool area. An authenticated attacker can exploit these issues to read and manage
the messages of other users on the affected application as well as move arbitrary folders on
the affected system. Such attacks could result in the disclosure of sensitive information as
well as affect the stability of the remote host itself.
Solution: No solution is known at this time.
Winmail Server <
CVE-2005-3189
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 3300 FAMILY: POP Server RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running a version of Magic Winmail Server that is vulnerable to multiple flaws. These
flaws include a directory traversal flaw that would allow an attacker to access confidential
data, a cross-site scripting (XSS) flaw and an HTML injection flaw.
Family Internet Services 850