(PVS) Signatures - Tenable Network Security

authentication routine. However the SSH server must be configured to use Host-Based
authentication only.
Solution: Upgrade to version 5.0.1 or higher.
CVE-2005-4310
ColdFusion < 7.01 MX Multiple Vulnerabilities
PVS ID: 3330 FAMILY: Web Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe remote host
is running Macromedia ColdFusion, a web application server. This version of ColdFusion
is vulnerable to a number of flaws. Some of the attacks are remote in nature; however, most
of the attacks require local user access. Successful exploitation results in remote users
bypassing security mechanisms or local users escalating their privileges (potentially to
Administrator rights)
Solution: Upgrade to ColdFusion 7.01 MX or higher.
CVE-2005-4345
Dropbear SSH Server < 0.47 svr_ses.childpidsize Remote Overflow
PVS ID: 3331 FAMILY: SSH
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
running a version of the Dropbear SSH server that is vulnerable to a remote buffer
overflow. An attacker exploiting this flaw would need to be able to log into a valid account.
After logging in, the user would send a malformed request to the SSH server which would
result in a buffer overflow and execution of arbitrary code.
Solution: Upgrade to version 0.47 or higher .
CVE-2005-4178
Pegasus Email Client < 4.31 Multiple Remote Overflows
PVS ID: 3332 FAMILY: SMTP Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to several remote buffer overflows.\n\nThe
remote host is running the Pegasus Email client. This version of Pegasus is vulnerable to
two (2) distinct remote buffer overflows. In the first instance, an attacker, convincing a
Pegasus user to connect to a malicious server, can cause a buffer overflow resulting in
execution of arbitrary code. In the second instance, an attacker would need to be able to
convince a Pegasus user to view the email 'headers'. Successful exploitation would result in
the execution of arbitrary code.
Family Internet Services 859