[FS-05-01] Multiple vulnerabilities in phpAdsNew

Security Advisory http://www.fitsec.com/advisories Severity: Low/Medium Title: Multiple vulnerabilities in phpAdsNew Date: 10.11.2005 ID: FS-05-01 Author: Toni Koivunen toni.koivunen at fitsec.com - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis: phpAdsNew has a pa...

Raptor FW version 6.5 detection

By sending an invalid HTTP request to an webserver behind Raptor firewall, the http proxy itself will respond. The server banner of Raptor FW version 6.5 is always 'Simple, Secure Web Server 1.1' You should avoid giving an attacker such information. OpenVAS Vulnerability Test $Id: raptordetect.na...

ArGoSoft FTP Server XCWD Overflow

The remote host is running the ArGoSoft FTP server. It was possible to shut down the remote FTP server by issuing a XCWD command followed by a too long argument. This problem allows an attacker to prevent the remote site i from sharing some resources with the rest of the world. OpenVAS...

BlueCoat ProxySG console management detection

The remote host appears to be a BlueCoat ProxySG, connections are allowed to the web console management. Letting attackers know that you are using a BlueCoat will help them to focus their attack or will make them change their strategy. OpenVAS Vulnerability Test $Id: bluecoatmgntconsole.nasl 8023...

POP3 Server type and version

The remote POP3 servers leak information about the software it is running, through the login banner. This may assist an attacker in choosing an attack strategy. Versions and types should be omitted where possible. OpenVAS Vulnerability Test $Id: popserverdetect.nasl 8023 2017-12-07 08:36:26Z teis...

GlobalSCAPE Secure FTP Server User Input Overflow

The remote host is running GlobalSCAPE Secure FTP Server. GlobalSCAPE Secure FTP Server 3.0.2 and prior versions are affected by a buffer overflow due to mishandling the user-supplied input. An attacker would first need to authenticate to the server before they can execute arbitrary commands...

VisualRoute Web Server Detection

We detected the remote web server as being a VisualRoute web server. This server allows attackers to perform a traceroute to a third party's hosts without revealing themselves to the target of the traceroute. OpenVAS Vulnerability Test $Id: visualrouteserverdetect.nasl 5676 2017-03-22 16:29:37Z c...

LCDproc server detection

LCDproc is a system that is used to display system information and other data on an LCD display or any supported display device, including curses or text. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Horde Detection (HTTP)

HTTP based detection of Horde. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15604";...

SquirrelMail Detection

Detection of SquirrelMail. The script sends a connection request to the server and attempts to detect SquirrelMail and to extract its version. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Samba Web Administration Tool SWAT Detection (HTTP)

HTTP based detection of the Samba Web Administration Tool SWAT. SPDX-FileCopyrightText: 2005 SecuriTeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

sxdesign SIPd Status Server Detection

A SIP status server is running on this port. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Obtain list of all port mapper registered programs via RPC

This script calls the DUMP RPC on the port mapper, to obtain the list of all registered programs. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

IRC Server Banner Detection

This script tries to detect the banner of an IRC server. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Directory Scanner (HTTP)

HTTP based detection of various common dirs on the remote web server. SPDX-FileCopyrightText: 2005 Digital Defense Inc. SPDX-FileCopyrightText: Improved code and additional directories since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

ISC BIND Detection (DNS)

DNS TCP and UDP based detection of ISC BIND. SPDX-FileCopyrightText: 2005 SecuriTeam SPDX-FileCopyrightText: New / improved code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Intrusion.com SecureNet Provider Detection (HTTP)

The remote host appears to run the Intrusion.com SecureNet provider on this port. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Trend Micro IWSS Console Management Detection (HTTP)

The remote host appears to run the Trend Micro Interscan Web Security Suite. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FTP Banner Detection

This script detects and reports a FTP Server Banner. SPDX-FileCopyrightText: 2005 SecuriTeam SPDX-FileCopyrightText: New detection methods / pattern / code since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

pcAnywhere TCP

pcAnywhere is running on this port. SPDX-FileCopyrightText: 2005 Alert4Web.com Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10794";...