(PVS) Signatures - Tenable Network Security

PVS ID: 3473 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:21051
Description: Synopsis :\n\nThe remote IMAP server is affected by a buffer overflow
vulnerability.\n\nThe remote host is running Ipswitch Collaboration Suite / IMail Secure
Server / IMail Server, commercial messaging and collaboration suites for Windows.
According to its banner, the version of Ipswitch Collaboration Suite / IMail Secure Server /
IMail Server installed on the remote host has a buffer overflow issue in its IMAP server
component. Using a specially-crafted FETCH command with excessive data, an
authenticated attacker can crash the IMAP server on the affected host, thereby denying
service to legitimate users and possibly execute arbitrary code as LOCAL SYSTEM.
Solution: Upgrade to version 2006.03 or higher.
CVE-2005-3526
Mac OS X Multiple Vulnerabilities (Security Update 2006-002)
PVS ID: 3474 FAMILY: Operating System Detection RISK: HIGH NESSUS ID:21073
Description: Synopsis :\n\nThe remote operating system is missing vendor supplied patches. The remote
host is running Apple Mac OS X, but lacks Security Update 2006-002. This security update
contains fixes for the following applications
:\n\napache_mod_php\nCoreTypes\nLaunchServices\nMail\nSafari\nrsync
Solution: Retrieve security patch 2006-002 from Apple.
CVE-2006-1220
Mac OS X Multiple Vulnerabilities (Security Update 2006-002)
PVS ID: 3475 FAMILY: Operating System Detection RISK: HIGH NESSUS ID:21073
Description: Synopsis :\n\nThe remote operating system is missing vendor supplied patches. The remote
host is running Apple Mac OS X, but lacks Security Update 2006-002. This security update
contains fixes for the following applications
:\n\napache_mod_php\nCoreTypes\nLaunchServices\nMail\nSafari\nrsync
Solution: Retrieve security patch 2006-002 from Apple.
CVE-2006-0399
Passive Vulnerability Scanner (PVS) Signatures
Simple PHP Blog < 0.4.7.2 install05.php Local File Inclusion
PVS ID: 3476 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a local 'file inclusion' flaw.\n\nThe remote
host is running the Simple PHP Blog, web log (or blog) package. This version of Simple
PHP Blog is vulnerable to a flaw where remote users can manipulate the application to
include any local file within an executed query. For example, the attacker could request that
the /etc/passwd file be used in a PHP query that would then return confidential data back to
Family Internet Services 895