TFTP Server DoS

Product: TFTP Server 2002 Standard Edition Authors: SolarWinds www.SolarWinds.net Vulnerable versions: v.5.0.55 and bellow Vulnerability: buffer overflow Bug&exploit by D4rkGr3y www.dhgroup.org Overview-------------------------------------------------------------- From TFTP Server help: "Many...

MS02-048: Flaw in Certificate Enrollment Control Could Allow Deletion of Digital Certificates (323172)

The remote host contains a version of the Certificate Enrollment control that may allow an attacker to delete certificates. To exploit this vulnerability an attacker must create a rogue web server with SSL and lure the user to visit this site. C Tenable Network Security, Inc. include"compat.inc";...

MS02-050: Certificate Validation Flaw Could Enable Identity Spoofing (328145)

The remote host contains a version of the CryptoAPI that could allow an attacker to spoof the identity of another user with malformed SSL certificates. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11145; scriptversion"1.49"; scriptcvsdate"Date: 2018/11/15 20:50:29"...

MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (323255)

The remote host contains a version of the HTML Helpfacility ActiveX control module that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and enticing a victim to visit it. C Tenable Network Security, Inc. include"compat.inc"; if description...

Viralator CGI Script Arbitrary Command Execution

The CGI 'viralator.cgi' is installed. Some versions of this CGI are don't check properly the user input and allow anyone to execute arbitrary commands with the privileges of the web server. No flaw was tested. Your script might be a safe version. %NASLMINLEVEL 70300 C Tenable Network Security, In...

AppSocket Half-open Connection Remote DoS

It seems that it is possible to lock out your printer from the network by opening a few connections and keeping them open. Note that the AppSocket protocol is so crude that Nessus cannot check if it is really running behind this port. C Tenable Network Security, Inc. include"compat.inc"; if...

PHP < 4.2.x mail Function CRLF Injection

The remote host is running a version of PHP earlier than 4.2.2. The new POST handling system in PHP 4.2.0 and 4.2.1 has a bug which allows an attacker to disable the remote server or to compromise it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from...

Resin MS-DOS Device Request Path Disclosure

Resin will reveal the physical path of the webroot when asked for a special DOS device, e.g. lpt9.xtp An attacker may use this flaw to gain further knowledge about the remote filesystem layout. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson...

Alcatel PABX 4400 Detection

The remote host is an Alcatel PABX 4400. This device can be configured thru the serial port or using this port. Outsiders should not be able to connect to this device. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11019; scriptversion "1.14"; scriptcvsdate"Date:...

eDonkey Detection

The remote host appears to be running eDonkey or one of its variants, which is commonly used for sharing music, films, and software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid11022; scriptversion"1.30";...

SNMP Request Cisco Router Information Disclosure

It is possible to determine the model of the remote CISCO system by sending SNMP requests with the OID 1.3.6.1.4.1.9.1. An attacker may use this information to gain more knowledge about the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

LocalWeb2000 2.1.0 Multiple Remote Vulnerabilities

The remote host is running LocalWeb2000. Version 2.1.0 of LocalWeb2000 allows an attacker to view protected files on the host's computer. It may also disclose the NetBIOS name of the remote host when it receives malformed directory requests. This script was created by Jason Lidow The vulnerabilit...

Gnutella Servent Detection

The remote host is running a Gnutella 'servent', a P2P file sharing application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid10946; scriptversion"1.34"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft IIS Multiple Remote DoS (MS02-018 / Q319733)

There's a denial of service vulnerability on the remote host in the Front Page ISAPI filter. An attacker may use this flaw to prevent the remote service from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Thanks to: SPIKE v2.1 : MS02-018 supercedes : MS01-043, MS01-025,...

Command execution in XChat

During call to external program DNS name of remote host is used withot stripping of shell characters...

RemotelyAnywhere SSH Detection

The RemotelyAnywhere SSH server is running on this system. According to NAVCIRT, attackers target this management tool. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Broken link deleted include"compat.inc";...

RemotelyAnywhere WWW Detection

A RemotelyAnywhere WWW server is running on the remote host. According to NAVCIRT, attackers use this management tool as a backdoor. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson nb: domain no longer exists Broken link...

Open Port Re-check

One of several ports that were previously open are now closed or unresponsive. There are several possible reasons for this : - The scan may have caused a service to freeze or stop running. - An administrator may have stopped a particular service during the scanning process. This might be an...

Brian Dorricott MAILTO 1.0.7-9 - Unauthorized Mail Server Use

Brian Dorricott MAILTO 1.0.7-9 - Unauthorized Mail Server Use source: https://www.securityfocus.com/bid/3669/info MAILTO is a program maintained by Brian Dorricott. It enables web servers to allow forms to be converted into mail messages that can be sent to numerous recipients. An issue exists in...

Webalizer < 2.01-09 Multiple XSS

Webalizer, a web server log analysis application, was detected on the remote host. This version of Webalizer has multiple cross-site scripting vulnerabilities that could allow malicious HTML tags to be injected in the reports. %NASLMINLEVEL 70300 This script was written by Georges Dagousset See t...