Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://marc.theaimsgroup.com/?l=bugtraq&m=109995749510773 http://www.vuxml.org/freebsd/927743d4-5ca9-11d9-a9e7-0001020eed82.html
Insight
The following packages are affected:
up-imapproxy
pop3proxy
CVE-2004-1035
Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service (server crash) and possibly leak sensitive information via certain literal values that are not properly handled when using the IMAP_Line_Read function.
Severity
Classification
-
CVE CVE-2004-1035 -
CVSS Base Score: 6.4
AV:N/AC:L/Au:N/C:P/I:N/A:P
Related Vulnerabilities