(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 8.12.0 or higher.
CVE-2006-3066
Sendmail < 8.13.7 Multi-part MIME Message Handling DoS
PVS ID: 3653 FAMILY: SMTP Servers
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a Denial of Service (DoS)
attack.\n\nAccording to its banner, the remote sendmail server is running a version less than
8.13.7. There is a flaw in versions of Sendmail less than 8.13.7 that would allow a remote
attacker to deny resources to legitimate users. An attacker exploiting this flaw would only
need to be able to send email through the remote sendmail server.
Solution: Upgrade to version 8.13.7 or higher.
Calendarix <
CVE-2006-1173
PVS ID: 3654 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a SQL Injection attack.\n\nThe remote host
is running Calendarix, a calendar application for web servers. This version of Calendarix is
vulnerable to a flaw in the way that it parses user-supplied HTTP data. An attacker
exploiting this flaw would be able to send specially formatted SQL commands that, upon
being parsed, would execute on the remote database server. This can lead to a loss of
confidentiality, integrity, and availability on the remote database server.
Solution: Upgrade or patch according to vendor recommendations.
CVE Not available
MERCUR < 2005 SP4 Multiple Remote DoS
PVS ID: 3655 FAMILY: POP Server RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a number of Denial of Service (DoS)
attacks.\n\nThe remote host is running the Atrium Software MERCUR mail server, a POP3,
SMTP and IMAP server. This version of MERCUR is vulnerable to a number of flaws in
the way that it handles user-supplied commands. Some of the commands do not require
prior authentication. An attacker exploiting these flaws would be able to cause the
MERCUR server to fail. Successful exploitation would result in the loss of availability.
Solution: Upgrade to version 2005 SP4 or higher.
CVE-2006-7041
Passive Vulnerability Scanner (PVS) Signatures
Mambo < 4.6.1 Login Function usercookie Cookie SQL Injection
Family Internet Services 943