(PVS) Signatures - Tenable Network Security

Solution: No solution is known at this time.
CVE-2006-1292
Mercur Mailserver Remote Overflow
PVS ID: 3480 FAMILY: IMAP Servers RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote IMAP
server is running Mercur Mailserver %L.\n\nThis version of Mercur is vulnerable to a flaw
where remote users can send specially crafted IMAP LOGIN and SELECT commands.
Upon parsing of these commands, the Mercur Mailserver crashes, potentially executing
arbitrary system code.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2006-7041
Curl < 7.15.3 TFTP URL Parsing Overflow
PVS ID: 3481 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a buffer overflow.\n\nThe remote host is
using a version of curl (or libcurl) that is vulnerable to a remote buffer overflows. An
attacker would have to set up a rogue web server and entice a curl user to browse to the
malicious server to exploit this vulnerability. Upon successful exploitation, the attacker
would be able to execute arbitrary commands with the rights of the web server. The
specific flaw occurs when processing long 'tftp://' URIs. E.g.,
tftp://www.somesite.com/[512 bytes]
Solution: Upgrade to version 7.15.3 or higher.
CVE-2006-1061
MailEnable WebMail Multiple Products Quoted Printable Mail DoS
PVS ID: 3482 FAMILY: IMAP Servers
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS) attack.\n\nThe
remote host is running a version of MailEnable's WebMail service that is prone to a remote
Denial of Service (DoS) attack. Specifically, an attacker sending malformed web data can
crash the service. An attacker exploiting this flaw would only need to be able to create and
send a malformed email to a valid WebMail user. Successful exploitation leads to a loss of
availability.
Solution: Upgrade to MailEnable Professional 1.73 or higher or to MailEnable Enterprise Edition
1.21 or higher.
Family Internet Services 897