3486 matches found
Cobalt Qube WebMail readmsg.php mailbox Parameter Traversal Arbitrary File Access
The file '/base/webmail/readmsg.php' was detected on the remote web server. Some versions of this CGI allow remote users to read local files with the permission of the web server. Nessus just checked the presence of this file but did not try to exploit the flaw. %NASLMINLEVEL 70300 C Tenable...
SeaNox Devwex - Denial of Service and Directory traversal
Affected: Seanox DevWex 1.2002.0520 Windows binary Vulnerability: DoS and directory traversal using Win32 path delimiter Risk: High Code execution?-MediumDoS and directory traversal Vendor contacted: 26-5-2002 Vendor fix: http://www.seanox.de/projects.devwex.php4 DevWex is a small and flexible...
ping.asp CGI Arbitrary Command Execution
The 'ping.asp' CGI is installed. Some versions allow an attacker to launch a ping flood against the targeted machine or another by entering '127.0.0.1 -l 65000 -t' in the Address field. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Er...
Xpede many vulnerabilities
Xpede C00kb00k // Note As mentionned below in the "vendor status" section, i did not get any reply after 3 mails, asking for acknowledgment and an amount of working time expected before an official patch release. Well, at that time i still have no idea if intellisol/workforceroi is currently...
iXsecurity.20020327.tivoli_tsm_dsmcad.a
iXsecurity Security Vulnerability Report No: iXsecurity.20020327.tivolitsmdsmcad.a =========================================== Vulnerability Summary --------------------- Problem: The Tivoli Storage Manager webserver, running on port 1581 has a buffer overflow condition. Threat: An attacker could...
Web Interface Vulnerabilities in Cisco Secure ACS for Windows
...
Microsoft Windows - Local Users Information : Disabled Accounts
Using the supplied credentials, Nessus was able to list local user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10913; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Local User...
Citrix Client Access Verification
Your professional opinions are appreciated. About a month ago I had posted the below as a Citrix Client Access Advisory and got several responses to the fact that it either it was not a valid vulnerabilty or that it was a default configuration problem. which may be true. but consider this. The...
Apache Auth Module SQL Injection
The 'modauthpgsqlsys' module is prior to 0.9.6. It is, therefore, affected by a SQL injection vulnerability that allows an attacker to bypass authentication. Script to check for Apache Authentication Modules SQL Insertion Vulnerability This script is copyright c 2001 Matt Moore modifications by r...
Tripwire for Webpages Installation Disclosure
The remote host is running Tripwire for Webpages, a commercial product to monitor for changes in web pages. This information may prove useful to anyone doing reconnaissance before launching an actual attack. %NASLMINLEVEL 70300 C Tenable Network Security include'deprecatednasllevel.inc';...
cue.sh
!/usr/bin/ksh THIS IS A DANGEROUS SCRIPT !!! READ THE CODE PRIOR TO ./! This is just a proof of concept. Don't use for malicious purpose. If ever you decide to run that script, please read the code carefully before! Emilie Chang, 2001. Dedicated to Scriptors of Doom and HERT people. Good job...
Oracle WebDb engine brain-damagse
Ladies and gentlemen, here's something tasty: // Standard disclaimer applies. This post expresses my personal beliefs // and convinctions only. I am speaking as a private person. All the // statements were been provided for informative purposes only, and have // to be verified by the reader. NONE...
MS00-089: Domain Account Lockout Vulnerability (274372)
The hotfix for the 'domain account lockout' problem has not been applied. This vulnerability allows a user to bypass the domain account lockout policy, and hence attempt to brute-force a user account. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10555;...
Distributed GL Daemon (DGLD) allows attackers to identify IRIX systems
Overview Attackers are using the presence of the dgld service to identify SGI IRIX systems. Description The CERT/CC has received multiple reports of an apparent vulnerability in the Distributed GL Daemon on SGI IRIX systems. Upon further investigation, it is our belief that no vulnerability exist...
(SRADV00002) Remote root compromise through pam_smb and pam_ntdom
================================================= Secure Reality Pty Ltd. Security Advisory 1 SRADV00002 http://www.securereality.com.au ================================================= Title Remote root compromise through pamsmb and pamntdom Released 11/09/2000 Vulnerable pamsmb - stable versio...
RobTex Viking Server 1.0.6 Build 355 - Remote Buffer Overflow
// source: https://www.securityfocus.com/bid/1614/info A number of unchecked buffers exists in Robotex Viking Server. This enables a malicious user to either crash the application or execute arbitrary code, depending on the data supplied. / Robotex Viking Server Buffer Overflow Vulnerability Xplo...
Microsoft Windows SMB Service Enumeration
This plugin implements the SvcOpenSCManager and SvcEnumServices calls to obtain, using the SMB protocol, the list of active and inactive services of the remote host. An attacker may use this feature to gain better knowledge of the remote host. C Tenable Network Security, Inc. include"compat.inc";...
Microsoft Windows SMB Shares Enumeration
By connecting to the remote host, Nessus was able to enumerate the network share names. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10395; scriptversion"1.48"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01"; scriptnameenglish:"Microsoft...
/doc Directory Browsable (deprecated)
The /doc directory is browsable. /doc shows the contents of the /usr/doc directory, which reveals not only which programs are installed but also their versions. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVEL 999999 Copyright 2000 by...