IRIX rpc.yppasswdd Unspecified Remote Overflow

The remote RPC service 100009 yppasswdd is vulnerable to a buffer overflow which allows any user to obtain a root shell on this host. Note: This issue is different than the one described in CVE-2002-0357 / SGI advisory 20020601-01-P. C Tenable Network Security, Inc. This is NOT the issue describe...

Symantec pcAnywhere Detection (TCP)

Symantec pcAnywhere allows a Windows user to remotely obtain a graphical login and therefore act as a local user on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10794; scriptversion"1.46"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft Windows 2000 Telnet Service uses named pipes with predictable names

Overview The Microsoft Windows 2000 Telnet Service contains a vulnerability that allows unprivileged local users to execute arbitrary code with elevated privileges. Description The Microsoft Windows 2000 Telnet Service creates a named pipe to share information between the processes that handle ea...

RTSP Server Type / Version Detection

The remote server is an RTSP server. RTSP is a client-server multimedia presentation protocol, which is used to stream videos and audio files over an IP network. It is usually possible to obtain the list of capabilities and the server name of the remote RTSP server by sending an OPTIONS request. ...

COM+ Internet Services (CIS) Server Detection

COM+ Internet Services are RPC over HTTP tunneling and require IIS to operate. CIS ports shouldn't be visible on internet but only behind a firewall. This script was written by Georges Dagousset See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title 10/12/09...

BSD Line Printer Daemon vulnerable to buffer overflow via crafted print request

Overview The line printer daemon enables various clients to share printers over a network. There exists a buffer overflow vulnerability in this daemon that permits remote execution of arbitrary commands with elevated privileges. Description There is a buffer overflow in several implementations of...

Microsoft Windows Alerter Service Social Engineering Weakness

The alerter service is running. This service allows NT users to send pop-up messages to each other. This service can be abused by an attacker who can trick valid users into doing some actions that may harm their accounts or your network social engineering attack C Tenable Network Security, Inc...

Microsoft Windows Messenger Service Social Engineering Weakness

The messenger service is running. This service allows NT users to send pop-up messages to each other. This service can be abused by anyone who can trick valid users into doing some actions that may harm their accounts or your network social engineering attack. C Tenable Network Security, Inc...

NAI WebShield SMTP Management Agent SET_CONFIG Overflow

The remote NAI WebShield SMTP Management tool is vulnerable to a buffer overflow which allows an attacker to gain execute arbitrary code on this host when it is issued a too long argument as a configuration parameter. In addition to this, it allows an attacker to disable the service at will. To...

Talk Service (talkd, in.talk, ntalk) Detection

The remote service responded to a talk request. A talk server also known as 'talkd', 'in.talk', or 'ntalk' is a service that works over UDP and notifies a user when someone wants to initiate a conversation. Note that talk is nowadays considered by many to be obsolete. C Tenable Network Security,...

Symantec pcAnywhere Status Service Detection (UDP)

The remote host is running Symantec pcAnywhere Status server, a service used to discover pcAnywhere servers on a network. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10006; scriptversion "1.32"; scriptcvsdate"Date: 2019/09/25 9:17:09"; scriptnameenglish:"Symantec...

POP Server Detection

The remote host is running a server that understands the Post Office Protocol POP, used by email clients to retrieve messages from a server, possibly across a network link. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10185; scriptversion "1.25"; scriptcvsdate"Date:...

NNTP Server Detection

The remote host is running a news server NNTP. Make sure that hosting such a server is authorized by your company policy. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10159; scriptversion "1.24"; scriptcvsdate"Date: 2019/11/22"; name"english" = "NNTP Server...

SMTP Server Detection

The remote host is running a mail SMTP server on this port. Since SMTP servers are the targets of spammers, it is recommended you disable it if you do not use it. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10263; scriptversion "1.57";...

Telnet Server Detection

The remote host is running a Telnet server, a remote terminal server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10281; scriptversion"1.52"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/06/12"; scriptnameenglish:"Telnet Server Detection";...

CDE RPC tooltalk Service Multiple Overflows

The tooltalk RPC service is running. A possible implementation fault in the ToolTalk object database server may allow an attacker to execute arbitrary commands as root. This warning may be a false positive since the presence of this vulnerability is only accurately identified with local access. C...

RPC database Service Detection

The database RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10214; scriptversion"1.22";...

RPC rstatd Service Detection

The remote host is running the rstatd RPC service. This service provides information such as : - the CPU usage - the system uptime - the network usage C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10227; scriptversion"1.34"; scriptcvsdate"Date: 2019/10/04 16:48:26";...

RPC etherstatd Service Detection

The etherstatd RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10215; scriptversion"1.22";...

3270 Mapper Service Detection

The 3270 mapper RPC service is running. If you do not use this service, then you should disable it as it may become a security threat in the future, if a vulnerability is discovered. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10208; scriptversion"1.22";...