Debian DSA-128-1 : sudo - buffer overflow

fc found a buffer overflow in the variable expansion code used by sudo for its prompt. Since sudo is necessarily installed suid root a local user can use this to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

MS04-028 Exploitation Backdoor Account Detection

It was possible to log into the remote host with the login 'X' and a blank password. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS04-028 creates such an account. This probably means that the remote host has been compromised by the use of this...

Serv-U 4.x-5.x STOU Command MS-DOS Argument Remote DoS

It is possible to crash the remote FTP server by sending it a STOU command. An attacker could exploit this flaw to prevent users from sharing data through FTP, and may even crash this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14709; scriptversion"1.25";...

Keene Digital Media Server Multiple Script XSS

The remote host runs Keene digital media server, a web server used to share digital information. This version is vulnerable to multiple cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Drinsane include'deprecatednasllevel.inc'; include'compat.inc';...

Xedus Web Server Traversal Arbitrary File Access

The remote host runs Xedus Peer-to-Peer web server. This version is vulnerable to directory traversal. An attacker could send a specially crafted URL to view arbitrary files on the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14645; scriptversion"1.23";...

Xedus Webserver Multiple XSS

The remote host runs Xedus Peer-to-Peer web server. This version is vulnerable to cross-site scripting attacks. With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity. C Tenable Network Security, Inc. include"compat.inc"; if description...

AIX 5.1 : IY48658

The remote host is missing AIX Critical Security Patch number IY48658 Sendmail prescan vulnerability. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.2 : IY48657

The remote host is missing AIX Critical Security Patch number IY48657 Sendmail prescan vulnerability. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.1 : IY40501

The remote host is missing AIX Critical Security Patch number IY40501 SECURITY: buffer overflow in sendmail. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Medal of Honor Multiple Remote Overflows

The remote host was running the Medal of Honor game server. The version installed on the remote host is vulnerable to a remote attack that allows for arbitrary code execution. Note that Nessus has disabled this service in testing for this flaw. C Tenable Network Security, Inc. include"compat.inc"...

ASPrunner 2.4 Multiple Vulnerabilities

The remote host is running ASPrunner prior to version 2.5. There are multiple flaws in this version of ASPrunner which would enable a remote attacker to read and/or modify potentially confidential data. An attacker, exploiting this flaw, would need access to the web server via the network...

Mandrake Linux Security Advisory : openssh (MDKSA-2002:019)

Joost Pol found a bug in the channel code of all versions of OpenSSH from 2.0 to 3.0.2. This bug can allow authenticated users with an existing account on the vulnerable system to obtain root privilege or by a malicious server attacking a vulnerable client. OpenSSH 3.1 is not vulnerable to this...

Solaris 8 (sparc) : 109077-21

SunOS 5.8: dhcp server and admin patch. Date this patch was last updated by Sun : Nov/06/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 109320-22

SunOS 5.8: lp patch. Date this patch was last updated by Sun : Nov/07/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid13319;...

Solaris 2.5.1 (sparc) : 108363-02

The remote host is missing Sun Security Patch number 108363-02 CDE 1.0.2: libDtSvc Patch. Date this patch was last updated by Sun : Tue Dec 04 04:58:34 MST 2001 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

Solaris 8 (x86) : 109327-24

SunOS 5.8x86: libresolv.so.2, in.named an. Date this patch was last updated by Sun : Mar/09/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 116453-03

SunOS 5.9: sadmind patch. Date this patch was last updated by Sun : May/21/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (x86) : 116442-01

SunOS 5.8x86: Solaris sadmind default sec. Date this patch was last updated by Sun : Feb/06/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 116455-01

SunOS 5.8: Solaris sadmind default securit. Date this patch was last updated by Sun : Feb/06/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Default Password (12345678) for 'root' Account on MacOS X Server

Nessus was able to login to the remote host using the following credentials : Username : root Password : 12345678 On older Macintosh computers, Mac OS X server is configured with this default account on newer computers, the serial number of the system is used instead. C Tenable Network Security,...