1319 matches found
Mobius DocumentDirect ddicgi.exe Long GET Request Overflow
The file 'ddicgi.exe' exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker may use this file to gain access to confidential data or escalate their privileges on the web server. It seems that Nessus crashed your web server. %NASLMINLEVEL 70300 This...
ArGoSoft Mail Server HTTP Daemon GET Request Saturation DoS
It is possible to kill the remote HTTP server by sending an invalid request to it. An unauthenticated attacker may leverage this issue to crash the affected server. C Tenable Network Security, Inc. From: "[email protected]" To: [email protected] Subject: Denial of Service Attack against...
LeapFTP < 2.7.4.x PASV Reply Remote Overflow
The remote host is running LeapFTP - an FTP client. There is a flaw in the remote version of this software that could allow an attacker to execute arbitrary code on this host. To exploit it, an attacker would need to set up a rogue FTP server and have a user on this host connect to it. C Tenable...
Multiple FTP Server quote stat Command Traversal Arbitrary Directory Access
The remote FTP server is vulnerable to a flaw that allows users to access files outside the FTP server root. An attacker may break out of his FTP jail by issuing the command : ftp quote stat ../ Some versions of VisNetic FTP Server and Titan FTP Server are known to be affected by this issue. C...
Lot of SQL injection on PHP-Nuke 6.5 (secure weblog!)
/----------------------------------------------------------------------------- | 7 A 6 9 - A d v C: 010 |-----------------------------------------------------------------------------| | | PHP-Nuke SQL injection | -----------------------------------------------------------------------------/ |...
CommuniGate Pro Referer Field Session Token Disclosure
The remote install of CommuniGate Pro, according to its version number, is vulnerable to a flaw that could allow a remote attacker to access the mailbox of a targeted user. To exploit such a flaw, an attacker needs to send an email to its victim with a link to an image hosted on a rogue server th...
BadBlue ISAPI Extension .hts Crafted File Extension Request Authentication Bypass
The remote host is running the BadBlue web server earlier than 2.2. Such versions are reportedly affected by an authentication bypass vulnerability. It is possible for an attacker to gain administrative access using a filename with a .ats extension instead of a .hts extension. C Tenable Network...
Xeneo Web Server %A Request Remote DoS
The remote host is running a vulnerable version of the Xeneo web server. It is possible to crash the web server by requesting a malformed URL ending with /%A or /%. C Tenable Network Security, Inc. See also: XeneoWebServer2.2.9.0DoS.nasl by Bekrar Chaouki I wrote this script at the same time...
paFileDB pafiledb.php Multiple Parameter SQL Injection
The remote installation of paFileDB is vulnerable to SQL injection attacks because of its failure to sanitize input to the 'id' and 'rating' parameters to the 'pafiledb.php' script. An attacker may use this flaw to control your database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Date:...
3com RAS 1500 / Wyse Winterm Malformed Packet Remote DoS
It was possible to crash the remote host by sending a specially crafted IP packet with a null length for IP option 0xE4 An attacker may use this flaw to prevent the remote host from accomplishing its job properly. C Tenable Network Security, Inc. THIS SCRIPT WAS NOT TESTED ! will only work with...
Cisco SSH2 Server/Client Malformed Packet Remote DoS (CSCdz60229, CSCdy87221, CSCdu75477)
It is possible to make the remote IOS crash when sending it malformed SSH packets during the key exchange. These flaws are documented as CISCO bug ID CSCdz60229, CSCdy87221 and CSCdu75477. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11383; scriptversion"1.29";...
CVS Malformed Directory Request Double-free Privilege Escalation
According to its version number, the CVS server running on the remote host has a double free bug, which could allow a malicious user to elevate their privileges. C Tenable Network Security, Inc. include"compat.inc"; References: From: Stefan Esser Subject: Advisory 01/2003: CVS remote vulnerabilit...
BSD ftpd Single Byte Buffer Overflow
The remote ftp daemon contains a flaw in the 'replydirname' function which allows an attacker to write a null byte beyond the boundaries of the local buffer. An attacker can exploit this to gain root access. C Tenable Network Security, Inc. This script was written by Xue Yong Zhi...
Qpopper pop_msg() Macroname Remote Overflow
The remote Qpopper server, according to its banner, is vulnerable to a one-byte overflow ih its popmsg function after a call to Qvsnprintf. An attacker may use this flaw to execute code with the privileges of the Qpopper service usually non-root, provided that he has a valid POP account to log in...
Sendmail Crafted ETRN Commands Remote DoS
The remote Sendmail server, according to its version number, allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands after the connection has been terminated. C Tenable Network...
MS02-045: Unchecked buffer in Network Share Provider (326830)
Due to a flaw in Microsoft's SMB implementation, the remote host is vulnerable to a denial of service attack. By sending a specially crafted packet request, an attacker could launch a denial of service, causing the affected host to crash. Note that this vulnerability is not exploitable without...
Cisco IOS OSPF Neighbor Announcement Remote Overflow (CSCdp58462)
The Open Shortest Path First OSPF implementation in remote Cisco IOS software versions is vulnerable to a denial of service if it receives a flood of neighbor announcements in which more than 255 hosts try to establish a neighbor relationship per interface. An attacker may use this flaw to preven...
Unpassworded 'hax0r' Account
The account 'hax0r' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "hax0r"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11253; scriptversion"1.36";...
Unpassworded '4Dgifts' Account
The account '4Dgifts' has no password set. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11243; scriptversion"1.37";...
Unpassworded 'backdoor' Account
The account 'backdoor' has no password set. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11250; scriptversion"1.37";...