Advanced Poll admin/index.php Session Identifier Replay Authentication Bypass

The remote host is running Advanced Poll, a simple polling application written in PHP. The version of Advanced Poll installed on the remote host includes code to emulate PHP's 'registerglobals' functionality when that setting is disabled, which is true by default with recent versions of PHP. In...

Mac OS X Security Update 2007-001

The remote host is running a version of Mac OS X 10.3 or 10.4 which does not have Security Update 2007-001 applied. This update fixes a flaw in QuickTime which may allow a rogue website to execute arbitrary code on the remote host by exploiting an overflow in the RTSP URL handler. TRUSTED...

Fedora Core 4 : kernel-2.6.17-1.2141_FC4 (2006-769)

An update to the latest upstream stable release 2.6.17.3, which fixes a security issue with SCTP. Further details: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.2 Note that Tenable Network Security has extracted the...

CA BrightStor ARCserve Backup Tape Engine Multiple Remote Overflows (QO84983)

This host is running BrightStor ARCServe for Windows. The remote version of this software has multiple buffer overflow vulnerabilities in the Tape Engine MSRPC service. An attacker, by sending a specially crafted packet, may be able to crash the affected service or execute code on the remote host...

phpMyFAQ < 1.6.8 Multiple Vulnerabilities

Binary data 3880.prm...

OmniWeb Browser < 5.5.2 Javascript alert Function Format String

Binary data 3879.prm...

Cacti copy_cacti_user.php template_user Variable SQL Injection

The remote host is running Cacti, a web-based, front end to RRDTool for network graphing. The version of Cacti on the remote host does not properly check whether the 'copycactiuser.php' script is being run from a commandline and fails to sanitize user-supplied input before using it in database...

Yahoo! Messenger YMMAPI.YMailAttach ActiveX (ymmapi.dll) Overflow

The remote host contains a version of the 'YMailAttach' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host reportedly has an unspecified buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web...

MS06-072: Cumulative Security Update for Internet Explorer (925454)

The remote host is missing the IE cumulative security update 925454. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Note that Microsoft has re-released this hotfix as its initial version contained a buffer overflo...

Adobe Reader < 8.0 AcroPDF ActiveX Control Multiple Vulnerabilities

The remote host contains a version of the 'AcroPDF' ActiveX control included with Adobe Reader and Acrobat. The version of this ActiveX control on the remote host reportedly exposes several methods that fail to handle malformed arguments. If an attacker can trick a user on the affected host into...

Solaris 10 (i386) : 117550-12

The remote host is missing Sun Security Patch number 117550-12 Sun Studio 9x86: patch for Sun C++ 5.6x86 C++ Compiler. Date this patch was last updated by Sun : Wed Nov 26 05:16:44 MST 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This scrip...

GLSA-200611-18 : TIN: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200611-18 TIN: Multiple buffer overflows Urs Janssen and Aleksey Salow have reported multiple buffer overflows in TIN. Additionally, the OpenPKG project has reported an allocation off-by-one flaw which can lead to a buffer overflo...

HP OpenView Storage Mirroring Server Detection

The remote host is running HP OpenView Storage Mirroring Daemon. This service is part of the HP OpenView Management suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid23698; scriptversion"$Revision: 1.9 $"; scriptcvsdate"$Date: 2014/08/29 21:03:42 $";...

WinZip FileView ActiveX Control Vulnerabilities

The remote host contains a version of the 'FileView' ActiveX control from Sky Software that is included in third-party products such as WinZip. The version of this ActiveX control on the remote host reportedly exposes several methods that either can be used to execute arbitrary code or are affect...

Solaris 2.5.1 (sparc) : 105710-01

The remote host is missing Sun Security Patch number 105710-01 Sun WebServer 1.0: Security and Performance international Patch. Date this patch was last updated by Sun : Wed Dec 09 17:00:00 MST 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@...

Solaris 2.6 (i386) : 105188-18

The remote host is missing Sun Security Patch number 105188-18 SunLink X25 9.1 patchx86. Date this patch was last updated by Sun : Tue Jan 13 02:00:53 MST 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

Solaris 7 (sparc) : 107851-26

The remote host is missing Sun Security Patch number 107851-26 PGX32 2.1: Graphics Patch. Date this patch was last updated by Sun : Fri Jan 07 01:47:31 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

GLSA-200610-01 : Mozilla Thunderbird: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200610-01 Mozilla Thunderbird: Multiple vulnerabilities A number of vulnerabilities have been found and fixed in Mozilla Thunderbird. For details please consult the references below. Impact : The most severe vulnerabilities might...

UBB.threads doeditconfig Arbitrary Command Injection

The version of UBB.threads installed on the remote host fails to sanitize input to the 'thispath' and 'config' parameters of the 'admin/doeditconfig.php' script before using them to update the application's configuration file. Provided PHP's 'registerglobals' setting is enabled, an unauthenticate...

DokuWiki fetch.php Multiple Parameter imconvert Function Arbitrary Command Execution

The remote host is running DokuWiki, an open source wiki application written in PHP. The installed version of DokuWiki fails to properly sanitize input to the 'w' and 'h' parameters of the 'lib/exe/fetch.php' script before using it to execute a command when resizing images. An unauthenticated...