MAX PRESENCE,TP3106,TP3206 Security Vulnerabilities

NetSphere Backdoor Detection

The NetSphere backdoor is installed on the remote host. By connecting to it, a remote attacker can gain control of the affected...

IRIX wrap CGI Traversal Arbitrary Directory Listing

The 'wrap' CGI is installed. This CGI allows anyone to get a listing for any directory with mode +755. Note that not all implementations of 'wrap' are...

WebGais webgais CGI Arbitrary Command Execution

The 'webgais' CGI is installed. This CGI may let an attacker execute arbitrary commands with the privileges of the http daemon (usually root or...

Multiple Vendor jj CGI Arbitrary Command Execution

The 'jj' CGI is installed. This CGI has a well-known security flaw that lets a remote attacker execute arbitrary commands with the privileges of the web server. Please note that Nessus only checked for the existence of this CGI, and did not attempt to exploit...

Multiple Vendor phf CGI Arbitrary Command Execution

The 'phf' CGI is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon (usually root or...

Multiple Web Server finger CGI Information Disclosure

The 'finger' CGI is installed. This can be used by a remote attacker to enumerate accounts on the system. Such information is typically valuable in conducting additional, more focused...

Netscape FastTrack get Command Forced Directory Listing

When the remote web server is issued a request with a lower-case 'get', it will return a directory listing even if a default page such as index.html is present. For example : get / HTTP/1.0 will return a listing of the root directory. This allows an attacker to gain valuable...

Web Server /cgi-bin Perl Interpreter Access

The 'Perl' CGI is installed and can be launched as a CGI. This is equivalent to giving a free shell to an attacker, with the http server privileges (usually root or...

OmniHTTPd visadmin.exe Malformed URL DoS

It is possible to fill the hard disk of a server running OmniHTTPd by issuing the request : http://omni.server/cgi-bin/visadmin.exe?user=guest This allows an attacker to crash your web server. This script checks for the presence of the faulty CGI, but does not execute...

IRIX webdist.cgi Arbitrary Command Execution

The 'webdist.cgi' CGI is installed. This script has a well-known security flaw that lets anyone execute arbitrary commands with the privileges of the web server user...

NCSA Campas cgi-bin Arbitrary Command Execution

The remote web server appears to be NCSA httpd. This version of the web server comes with a sample CGI script, campas, that fails to properly sanitize user input. This could allow a remote attacker to execute arbitrary commands with the privileges of the web...

Multiple Vendor view_source CGI Traversal Arbitrary File Access

The 'view_source' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon (usually root or...

IRIX pfdispaly Arbitrary File Access

The 'pfdispaly' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the http daemon (usually root or...

O'Reilly WebSite uploader.exe Arbitrary File Upload

The remote web server contains a CGI script named 'uploader.exe' in '/cgi-win'. Versions of O'Reilly's Website product before 1.1g included a script with this name that allows an attacker to upload arbitrary CGI and then execute...

Sambar Server dumpenv.pl Information Disclosure

CGI script 'dumpenv.pl' is installed on the remote host. This CGI gives away too much information about the web server configuration, which will help an...

Microsoft IIS advsearch.asp Direct Request Remote DoS

The remote instance of IIS includes the sample site 'ExAir'. By calling one of the included Active Server Pages, specifically '/iissamples/exair/search/advsearch.asp', an unauthenticated, remote attacker may be cause the web server to hang for up to 90 seconds (the default script timeout) if the...

Microsoft IIS search.asp Direct Request DoS

The remote instance of IIS includes the sample site 'ExAir'. By calling one of the included Active Server Pages, specifically '/iissamples/exair/search/search.asp', an unauthenticated, remote attacker may be cause the web server to hang for up to 90 seconds (the default script timeout) if the...

WebGais websendmail CGI Arbitrary Command Execution

The 'websendmail' program, part of Webgais, appears to be installed on the remote host. This CGI script has a well-known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon (usually root or...

Miva htmlscript Traversal Arbitrary File Access

The 'htmlscript' cgi is installed. This CGI has a well known security flaw that lets anyone read arbitrary files with the privileges of the HTTP daemon (root or...

Daytime Service Detection

The remote host is running a 'daytime' service. This service is designed to give the local time of the day of this host to whoever connects to this port. The date format issued by this service may sometimes help an attacker to guess the operating system type of this host, or to set up timed...

IRIX handler CGI Arbitrary Command Execution

The 'handler' cgi is installed. This CGI has a well known security flaw that lets anyone execute arbitrary commands with the privileges of the http daemon (root or...

Multiple Vendor info2www CGI Arbitrary Command Execution

The 'info2www' CGI is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon (usually root or...

Microsoft IIS query.asp Direct Request Remote DoS

The remote instance of IIS includes the sample site 'ExAir'. By calling one of the included Active Server Pages, specifically '/iissamples/exair/search/query.asp', an unauthenticated, remote attacker may be cause the web server to hang for up to 90 seconds (the default script timeout) if the...

Detectoid for WU Client supporting the MUv3 MSI Handler

This detectoid checks for the presence of the minimum version of the Windows Update Client that supports the MUv3 MSI Handler...

Host Integration Server.2004.SNADMOD

Presence of affected...

.NET Framework 4.5.1 RTM - MSI

This detectoid will be used to detect for presence of 4.5.1 RTM product on Win 7/Vista/WS08/WS08...

2023.07B_SSU_2K8R2_POS

Pre-req to check the presence of 2023.07B SSU on Server 2008...

ESUKeys_Year5&6_Server2K8_2K8R2_12122023

Pre-req to check the presence of year 5 and 6 ESU Keys on Server 2008 and...

2023.12B_SSU_2K8SP2

Pre-req to check the presence of 2023.12B SSU on Server 2008...

HIS.ESSO.SSOSQL

Presence of affected...

Toshiba driver block for Winblue

Detect presence of faulting toshiba...

Host Integration Server.2009.SNADMOD

Presence of affected...

Detectoid to check for presence of the Toshiba Bluetooth stack being installed

Designed by Bluetooth team for the purpose of "Bug #...

.NET 4.5.2 CBS

This detectoid will be used to detect for presence of the .NET Framework 4.5.2 product on WinServer 2K12, Win8.1, Win8.1 RT, and Server 2012 R2. AND Win8...

Host Integration Server.2010.SNADMOD

Presence of affected...

Host Integration Server.2006.SNADMOD

Presence of affected...

Symantec driver stack Overflow doublefault

Detect presence of Symantec driver causing stack...

.NET Framework 4.x - CBS

This detectoid will be used to detect for presence of 4.x product on Win...

Sandboxie driver block for RS2 x86

Detect presence of faulting Sandboxie...

Detectoid for Windows Update Client supporting MSI Handler

This detectoid checks for the presence of the minimum version of the Windows Update Client that supports the MSI...

FESKeys_Year5&6_Server2K8_2K8R2_12122023

Pre-req to check the presence of year 5 and 6 FES Keys on Server 2008 and...

.NET Framework 4.x RTM - MSI

This detectoid will be used to detect for presence of 4.x RTM product on Win 7/Vista/WS08/WS08...