eSeSIX Thintune Thin Client Multiple Vulnerabilities

Thintune is a series of thin client appliances sold by eSeSIX GmbH, Germany. They offer ICA, RDP, X11 and SSH support based on a customized Linux platform. Multiple security vulnerabilities have been found, one of them is a backdoor password 'jstwo' allowing complete access to the system. OpenVAS...

HACKER defender finder

This script checks whether the remote host is running the Hacker Defender backdoor. Hacker Defender is a rootkit for Windows. Among other things, it hooks itself into all open TCP ports on the system, listening for a specially-crafted packet, and opening a backdoor on that port when found. This...

Dabber worm detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...

SMTP server on a strange port

This SMTP server is running on a non standard port. This might be a backdoor set up by crackers to send spam or even control your machine. OpenVAS Vulnerability Test $Id: smtpbackdoor.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: SMTP server on a strange port Authors: Michel Arboi Copyrigh...

Bugbear.B web backdoor

Your system seems to be infected by the Bugbear.B virus its backdoor has been detected on port 81. More information: http://www.f-secure.com/v-descs/bugbearb.shtml OpenVAS Vulnerability Test $Id: bugbearb.nasl 7165 2017-09-18 08:57:44Z cfischer $ Description: Bugbear.B web backdoor Authors:...

Apache mod_rootme Backdoor

The remote system appears to be running the modrootme module, this module silently allows a user to gain a root shell access to the machine via HTTP requests. OpenVAS Vulnerability Test $Id: modrootmebackdoor.nasl 7175 2017-09-18 11:55:15Z cfischer $ Description: Apache modrootme Backdoor Authors...

Upside down world: back door Kill firewall&antivirus software(figure)-vulnerability warning-the black bar safety net

Often in the Get WebShell and elevation of Privilege, the server firewall or antivirus just to play a role, let's pass up the tools of the old disappear; or some firewall settings very BT, often causing a lot of inconvenience. Although some of the back door with cleanup antivirus and firewall...

Alcatel OmniSwitch 7700/7800 switches backdoor

The remote host seems to be a backdoored Alcatel OmniSwitch 7700/7800. SPDX-FileCopyrightText: 2005 deepquest Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Port TCP:0 Open

TCP port 0 is open on the remote host. This is highly suspicious as this TCP port is reserved and should not be used. This might be a backdoor REx. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Unpassworded 'bash' account

The account SPDX-FileCopyrightText: 2004 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15583";...

WinSATAN

WinSATAN is installed. This backdoor allows anyone to partially take control of the remote system. An attacker may use it to steal your password or prevent your system from working properly. OpenVAS Vulnerability Test $Id: winsatan.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: WinSATAN...

Bugbear worm

BugBear backdoor is listening on this port. SPDX-FileCopyrightText: 2005 Michel Arboi & Thomas Reinke Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FsSniffer Detection

This host appears to be running FsSniffer on this port. FsSniffer is backdoor which allows an intruder to steal PoP3/FTP and other passwords you use on your system. SPDX-FileCopyrightText: 2005 J.Mlodzianowski Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

TFTP backdoor

A TFTP server is running on this port. However, while trying to fetch some file, we retrieved an executable file. This is probably a backdoor. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

SMTP Server on non standard port

This SMTP server is running on a non standard port. This might be a backdoor set up by attackers to send spam or even control the system. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Dabber Worm Detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...

eSeSIX Thintune Thin Client Multiple Vulnerabilities

Multiple security vulnerabilities have been found in Thintune, one of them is a backdoor password SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

HACKER defender finder

This script checks whether the remote host is running the Hacker Defender backdoor. SPDX-FileCopyrightText: 2004 SIA Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apache HTTP Server 'mod_rootme' Backdoor

The remote system appears to be running the modrootme module, this module silently allows a user to gain a root shell access to the machine via HTTP requests. SPDX-FileCopyrightText: 2004 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

4553 Parasite Mothership Detect

The backdoor SPDX-FileCopyrightText: 2002 Violating Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11187";...