9625 matches found
Kibuv Worm Detection
The welcome message on this port matches the banner of a known backdoor. This is highly suspicious. The host is probably infected by a backdoor and is probably under the control of malicious attackers. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid18367; scriptversio...
Netref cat_for_gen.php Arbitrary PHP Command Injection
The remote host is running the Netref directory script, written in PHP. There is a vulnerability in the installed version of Netref that enables a remote attacker to pass arbitrary PHP script code through the 'ad', 'addirect', and 'mforracine' parameters of the 'catforgen.php' script. This code...
Woppoware PostMaster <= 4.2.2 Multiple Vulnerabilities
According to its banner, the version of Woppoware Postmaster on the remote host suffers from multiple vulnerabilities: - An Authentication Bypass Vulnerability An attacker can bypass authentication by supplying an account name to the 'email' parameter of the 'message.htm' page. After this, the...
Advanced Guestbook index.php entry Parameter SQL Injection
The remote host is running Advanced Guestbook - a guestbook written in PHP. The remote version of this software contains an input validation flaw leading to a SQL injection vulnerability. An attacker may exploit this flaw to execute arbitrary commands against the remote database. %NASLMINLEVEL...
myServer Multiple Vulnerabilities
Binary data 2892.prm...
602LAN SUITE Open Telnet Proxy
The remote host is running 602LAN SUITE with an open Telnet server proxy. By using through such a proxy, an attacker may be able to launch attacks that appear to originate from the remote host and possibly to access resources that are only available to machines on the same internal network as the...
PostgreSQL < 8.0.3 Multiple Vulnerabilities
According to its banner, the version of PostgreSQL installed on the remote host may suffer from the following vulnerabilities : - Character Conversion Vulnerability Unprivileged users can call functions supporting client- server character set conversion from SQL commands even though those functio...
RHEL 4 : nasm (RHSA-2005:381)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:381 advisory. NASM is an 80x86 assembler. Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM file in such a way...
bBlog <= 0.7.4 Multiple Vulnerabilities (SQLi, XSS)
The remote host is running bBlog, an open source blog software application. According to its banner, the remote version of this software suffers from several vulnerabilities: - A SQL Injection Vulnerability It is reportedly possible to inject SQL statements through the 'postid' parameter of the...
Oracle Application Server 9i Webcache < 9.0.4.0 Multiple Vulnerabilities
According to its banner, the version of Oracle Application Server 9i Webcache installed on the remote host suffers from several flaws: - Arbitrary File Corruption Vulnerability An attacker may be able to corrupt arbitrary files on the remote host by passing the filenames through the 'cachedumpfil...
Kerio Mailserver Admin Service Detection
The remote host appears to be running the Kerio Admin MailServer Admin Service on this port. Copyright C 2005 Secure Computer Group. University of A Coruna This script was written by Javier Munoz Mellid This script is released under the GNU GPL v2 Changes by Tenable: - Revised plugin title, remov...
phpBB <= 2.0.14 Multiple Vulnerabilities
According to its banner, the remote host is running a version of phpBB that suffers from multiple flaws: - A BBCode Input Validation Vulnerability The application fails to properly filter for the BBCode URL in the 'includes/bbcode.php' script. With a specially crafted URL, an attacker could cause...
PMSoftware Simple Web Server (GET Request) Remote BoF Exploit
No description provided by source. / PMSoftware Simple Web Server Buffer Overflow Exploit 3 targets cybertronicatgmxdotnet 04/25/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic - cybertronicatgmxdotnet...
RHEL 4 : HelixPlayer (RHSA-2005:392)
The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:392 advisory. HelixPlayer is a media player. A buffer overflow bug was found in the way HelixPlayer processes RAM files. An attacker could create a specially crafte...
Solaris 9 (x86) : 114263-06
SunOS 5.9x86: libgss.so.1 Patch. Date this patch was last updated by Sun : Aug/25/06 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Firefox < 1.0.3 Multiple Vulnerabilities
The remote version of this software contains various security issues that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. if NASLLEVEL 3004 exit1; include"compat.inc"; ifdescription scriptid18064; scriptversion"1.22"; scriptcveid "CVE-2005-0752...
PHP Photo Album < 2.0.14 Multiple Vulnerabilities
Binary data 2821.prm...
MS05-017: Vulnerability in MSMQ Could Allow Code Execution (892944) (uncredentialed check)
The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. Windows XP SP1 can be identified remotely without harm, n...
PostNuke < 0.760 RC4 Multiple XSS and SQL Injection Vulnerabilities
Binary data 2808.prm...
GLSA-200504-04 : mit-krb5: Multiple buffer overflows in telnet client
The remote host is affected by the vulnerability described in GLSA-200504-04 mit-krb5: Multiple buffer overflows in telnet client A buffer overflow has been identified in the envoptadd function, where a response requiring excessive escaping can cause a heap-based buffer overflow. Another issue ha...