Compaq WBEM Server Detection (HTTP)

We detected the remote web server to be a Compaq WBEM server. This web server enables attackers to gather sensitive information on the remote host, especially if anonymous access has been enabled. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced...

AppleShare IP / Apple Filing Protocol (AFP) Service Detection

The remote host is running an AppleShare IP / Apple Filing Protocol AFP service. By sending a DSIGetStatus request on tcp port 548, it was possible to disclose information about the remote host. SPDX-FileCopyrightText: 2005 James W. Abendschan Some text descriptions might be excerpted from a...

Skype < 1.4.0.84 Multiple Remote Overflows (credentialed check)

The remote host is running Skype, a peer-to-peer, voice-over-IP software. The remote version of this software is vulnerable to a heap overflow in the handling of its data structures. An attacker can exploit this flaw by sending a specially crafted network packet to UDP or TCP ports Skype is...

F5 BIG-IP Cookie Remote Information Disclosure

The remote host appears to be an F5 BIG-IP load balancer. The load balancer encodes the IP address of the actual web server that it is acting on behalf of within a cookie. Additionally, information after 'BIGipServer' is configured by the user and may be the logical name of the device. These valu...

phpMyAdmin < 2.6.4-pl3 Multiple Vulnerabilities

The version of phpMyAdmin installed on the remote host is affected by a local file inclusion vulnerability that can be exploited by an unauthenticated attacker to read arbitrary files, and possibly even to execute arbitrary PHP code on the affected host subject to the permissions of the web serve...

GLSA-200510-17 : AbiWord: New RTF import buffer overflows

The remote host is affected by the vulnerability described in GLSA-200510-17 AbiWord: New RTF import buffer overflows Chris Evans discovered a different set of buffer overflows than the one described in GLSA 200509-20 in the RTF import function in AbiWord. Impact : An attacker could design a...

Mad virus mad firewall—emerging-Trojan NameLess BackDoor Vengeance in mind(figure)-vulnerability warning-the black bar safety net

Editor's note: mention of the NameLess Latest 1. 4 version of the source code of the site there is a download NameLess Virus is a new Xing of DLL-Trojans, this Trojan was born not long, but is definitely a horse of great potential of a thousand miles Colt is. Speaking of the NameLess Trojan...

Use SMBCrack to crack the remote-host admin-password-vulnerability warning-the black bar safety net

SMBCrack for stream light 5 development of test prototype, and the conventional SMB shared violent hack tool, not using the system API, but the use of the SMB Protocol. Windows 2 0 0 0 can be in the same session for multiple password probe. Use SMBCrack crack the remote host administrator passwor...

GFI MailSecurity HTTP Management Interface Request Header Overflow

According to its version number, the instance of GFI MailSecurity on the remote host suffers from a buffer overflow in its web-based moderator interface. An unauthenticated attacker can reportedly exploit this flaw by sending large strings in several areas of the HTTP request to gain control of t...

RHEL 4 : openssh (RHSA-2005:527)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:527 advisory. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. An error in the way OpenSSH handled GSSAPI credential delegation was discovere...

Patchlink Detection

This script uses Windows credentials to detect whether the remote host is running Patchlink and extracts the version number if so. Patchlink is a fully Internet-based, automated, cross-platform, security patch management system. Josh Zlatin-Amishav josh at ramat dot cc GPLv2 Tenable grants a...

SUSE-SA:2005:053: squid

The remote host is missing the patch for the advisory SUSE-SA:2005:053 squid. This update of the Squid web-proxy fixes two remotely exploitable denial of service vulnerabilities. One can be triggered by aborting a request CVE-2005-2794 due to a faulty assertion. The other one occurs in...

GLSA-200509-16 : Mantis: XSS and SQL injection vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200509-16 Mantis: XSS and SQL injection vulnerabilities Mantis fails to properly sanitize untrusted input before using it. This leads to a SQL injection and several cross-site scripting vulnerabilities. Impact : An attacker could...

Debian DSA-832-1 : gopher - buffer overflows

Several buffer overflows have been discovered in gopher, a text-oriented client for the Gopher Distributed Hypertext protocol, that can be exploited by a malicious Gopher server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

GLSA-200509-18 : Qt: Buffer overflow in the included zlib library

The remote host is affected by the vulnerability described in GLSA-200509-18 Qt: Buffer overflow in the included zlib library Qt links to a bundled vulnerable version of zlib when emerged with the zlib USE-flag disabled. This may lead to a buffer overflow. Impact : By creating a specially crafted...

PunBB < 1.2.8 Multiple Vulnerabilities

According to its banner, the version of PunBB installed on the remote host suffers from several flaws. - A File Include Vulnerability The application fails to validate the 'language' parameter when a user updates his profile and uses that throughout the application to require PHP code in order to...

PunBB < 1.2.8 Multiple Vulnerabilities

Binary data 3235.prm...

ATutor Password Reminder SQL Injection

The remote host is running ATutor, an open source, web-based, Learning Content Management System LCMS designed with accessibility and adaptability in mind. The remote version of this software contains an input validation flaw in the 'passwordreminder.php' script. This vulnerability occurs only wh...

Calendar Express Multiple Vulnerabilities (SQLi, XSS)

The remote host is using Calendar Express, a PHP web calendar. Vulnerabilities exist in this version that could allow an attacker to execute arbitrary HTML and script code in the context of the user's browser, and SQL injection. An attacker could exploit these flaws to use the remote host to...

Firefox < 1.0.7 Multiple Vulnerabilities

The remote host is using Firefox, an alternative web browser. The installed version of Firefox contains various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ...