FreeBSD : SA-04:10.cvs

The remote host is running a version of FreeBSD which contains a heap overflow in the cvs pserver code. This flaw may be used by an attacker to execute arbitrary code on the remote host, provided that it's running a cvs pserver. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

FreeBSD : SA-04:12.jailroute

The remote host is running a version of the FreeBSD kernel which contains a bug which may allow a jailed process to modify the host routing tables of the whole system. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc"; ifdescription scriptid12555;...

Unreal Engine Secure Query Remote Overflow

The remote host was running a game server with the Unreal Engine on it. The game server is vulnerable to a remote attack which allows for arbitrary code execution. Note that Nessus disabled this service while testing for this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

MS04-011: Security Update for Microsoft Windows (835732) (uncredentialed check)

The remote version of Windows contains a flaw in the function 'DsRolerUpgradeDownlevelServer' of the Local Security Authority Server Service LSASS that allows an attacker to execute arbitrary code on the remote host with SYSTEM privileges. A series of worms Sasser are known to exploit this...

Aborior Encore WebForum display.cgi file Parameter Command Execution

The remote host is running the Aborior Web Forum. There is a flaw in this version that could allow an attacker to execute arbitrary commands on this server with the privileges of the affected web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Serv-U MDTM Command Overflow

The remote host is running Serv-U FTP server. There is a bug in the way this server handles arguments to the MDTM requests that could allow an attacker to trigger a buffer overflow in this server and disable it remotely or potentially execute arbitrary code on the host. C Tenable Network Security...

TYPSoft FTP Server 1.10 Invalid Path Request DoS

The remote host appears to be running TYPSoft FTP server. According to its banner, this version of the software has a denial of service vulnerability that can lead to complete exhaustion of CPU resources. This script was written by Audun Larsen Changes by Tenable: - Revised plugin title 2/03/2009...

Sami FTP Server Multiple DoS

The remote host is running SAMI FTP server. There is a bug in the way this server handles certain FTP command requests that may allow an attacker to crash the affected service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12061; scriptversion"1.23";...

MS04-007: ASN.1 parsing vulnerability (828028)

The remote Windows host has a ASN.1 library that is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted ASN.1 encoded packet either an IPsec session negotiation, or an HTTPS request with...

Cisco IOS 6000/6500/7600 Series Layer 2 Frame DoS (CSCdy15598, CSCeb56052)

The remote router contains a version of IOS which has multiple flaws when dealing with specially layer 2 packets. CISCO identifies this vulnerability as bug id CSCdy15598 and CSCeb56052. An attacker may use this flaw to render this router inoperable. C Tenable Network Security include"compat.inc"...

Compaq Web-Based Management Agent Remote Overflow DoS

It was possible to kill the remote web server by requesting something like: / This is probably a Compaq Web Enterprise Management server. This flaw could be used to forbid managing machines. C Tenable Network Security, Inc. References: Message-ID: Date: Thu, 19 Jun 2003 00:05:14 +0200 CEST From:...

Несколько уязвимостей в Sad Raven's Guestbook

Несколько уязвимостей в Sad Raven's Guestbook Программа: Sad Raven's Guestbook Сайт производителя: www.sad-raven.ru Уязвимая версия: 1.1 Опасность: низкая Найдено: MORPFEY Наличие эксплоита: Да Дата: 20.12.2003 Описание: В гостевой книге возможно отвечать от имени Администратора. Экплоит: В поле...

Flash Player < 7.0.19.0 Predictable Data Location Weakness

The remote host is running a version of Flash Player older than 7.0.19.0. Such versions can be abused in conjunction with several flaws in the web browser to read local files on an affected system. To exploit this issue, an attacker would need to lure a user of the software into visiting a rogue...

CuteNews Debug Info Disclosure

There is a bug in the remote version of CuteNews that allows an attacker to obtain information from a call to the phpinfo PHP function such as the username of the user who installed php, if they are a SUDO user, the IP address of the host, the web server version, the system version unix / linux,...

Cfengine cfservd ReceiveTransaction Function Remote Overflow (intrusive check)

The remote Cfserver seems to be vulnerable to a remote buffer overflow bug. Such a bug might be exploited by an attacker to execute arbitrary code on this host, with the privileges cfservd is running with. C Tenable Network Security, Inc. script based on exploit code by kokaninATdtors.net...

Exchange XEXCH50 Remote Buffer Overflow

The remote mail server appears to be running a version of the Microsoft Exchange SMTP service that is vulnerable to a flaw in the XEXCH50 extended verb. This flaw can be used to completely crash Exchange 5.5 or to execute arbitrary code on Exchange 2000. This script was written by H D Moore See t...

Default Password (db2inst) for 'db2inst1' Account

The account 'db2inst1' has the password 'db2inst1'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 This script was written by Chris Foster See the Nessus Scripts License for details Changes by Tenable Add globalsettings/suppliedloginsonly scriptexcludekey...

MyServer 0.4.3 / 0.7 Crafted Traversal Arbitrary File Access

This web server is running MyServer See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, added VDB refs, changed family 4/20/009 include"compat.inc"; ifdescription scriptid11851; scriptversion "1.16"; scriptcveid"CVE-2004-2516"; scriptbugtraqid11189;...

Dropbear SSH Server Username Remote Format String

The remote host is runnning Dropbear SSH. There is a format string vulnerability in all versions of the Dropbear SSH server up to and including version 0.34. An attacker may use this flaw to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc";...

MS03-026: Microsoft RPC Interface Buffer Overrun (823980) (uncredentialed check)

The remote version of Windows contains a flaw in the function RemoteActivation in its RPC interface that could allow an attacker to execute arbitrary code on the remote host with the SYSTEM privileges. A series of worms Blaster are known to exploit this vulnerability in the wild. C Tenable Networ...