WS_FTP Server Multiple Command Remote Overflow DoS

According to its version number, the remote WSFTP server is vulnerable to multiple buffer overflows which may be used by an attacker to execute arbitrary code on the remote system. C Tenable Network Security include"compat.inc"; ifdescription scriptid15857; scriptbugtraqid11772;...

Open DC Hub RedirectAll Value Remote Overflow

The remote host is running Open DC Hub, a peer-to-peer file sharing application, which is vulnerable to a remote buffer overflow. A successful exploit would allow a remote attacker to execute code on the remote host. It must be noted that the remote attacker needs administrative access to this...

Digital Mappings Systems POP3 Server (pop3svr.exe) Multiple Field Remote Overflow

The remote host is running Digital Mappings Systems POP3 server that has a remote buffer overrun vulnerability. An attacker, exploiting this flaw, may be crash the service. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid15783; scriptversion "1.12";...

Fastream NETFile FTP/Web Server HEAD Request Saturation DoS

The remote host appears to be running FastStream NETFile Server version 7.1 or older. These versions do not close the connection when an HTTP HEAD request is received with the keep-alive option set. An attacker may exploit this flaw by sending multiple HEAD requests to the remote host, thus...

Bugzilla Multiple Remote Command Execution

The remote Bugzilla bug tracking system, according to its version number, is vulnerable to arbitrary command execution flaws due to a lack of sanitization of user-supplied data in processbug.cgi. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Ipswitch WhatsUp Gold _maincfgret.cgi Remote Overflow

The 'maincfgret' CGI is installed on the remote web server. Some versions are vulnerable to a buffer overflow. Note that Nessus only checked for the presence of this CGI, and did not attempt to determine whether or not it is vulnerable. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

w-Agora Multiple Script Traversal Arbitrary File Access

The remote host is running w-agora, a web-based forum application written in PHP. The remote version of this software is prone to directory traversal attacks. A remote attacker could send specially crafted URL to read arbitrary files from the remote system with the privileges of the web server...

Debian DSA-344-2 : unzip - directory traversal

A directory traversal vulnerability in UnZip 5.50 allows attackers to bypass a check for relative pathnames '../' by placing certain invalid characters between the two '.' characters. The fix which was implemented in DSA-344-1 may not have protected against all methods of exploiting this...

Debian DSA-295-1 : pptpd - buffer overflow

Timo Sirainen discovered a vulnerability in pptpd, a Point to Point Tunneling Server, which implements PPTP-over-IPSEC and is commonly used to create Virtual Private Networks VPN. By specifying a small packet length an attacker is able to overflow a buffer and execute code under the user id that...

Debian DSA-128-1 : sudo - buffer overflow

fc found a buffer overflow in the variable expansion code used by sudo for its prompt. Since sudo is necessarily installed suid root a local user can use this to gain root access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DSA-462-1 : xitalk - missing privilege release

Steve Kemp from the Debian Security Audit Project discovered a problem in xitalk, a talk intercept utility for the X Window System. A local user can exploit this problem and execute arbitrary commands under the GID utmp. This could be used by an attacker to remove traces from the utmp file...

Debian DSA-053-1 : nedit - insecure temporary file

The nedit Nirvana editor package as shipped in the non-free section accompanying Debian GNU/Linux 2.2/potato had a bug in its printing code: when printing text it would create a temporary file with the to be printed text and pass that on to the print system. The temporary file was not created...

Debian DSA-505-1 : cvs - heap overflow

Stefan Esser discovered a heap overflow in the CVS server, which serves the popular Concurrent Versions System. Malformed 'Entry' Lines in combination with Is-modified and Unchanged can be used to overflow malloced memory. This was proven to be exploitable. %NASLMINLEVEL 70300 C Tenable Network...

MS04-028 Exploitation Backdoor Account Detection

It was possible to log into the remote host with the login 'X' and a blank password. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS04-028 creates such an account. This probably means that the remote host has been compromised by the use of this...

Serv-U 4.x-5.x STOU Command MS-DOS Argument Remote DoS

It is possible to crash the remote FTP server by sending it a STOU command. An attacker could exploit this flaw to prevent users from sharing data through FTP, and may even crash this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14709; scriptversion"1.25";...

Keene Digital Media Server Multiple Script XSS

The remote host runs Keene digital media server, a web server used to share digital information. This version is vulnerable to multiple cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Drinsane include'deprecatednasllevel.inc'; include'compat.inc';...

Xedus Webserver Multiple XSS

The remote host runs Xedus Peer-to-Peer web server. This version is vulnerable to cross-site scripting attacks. With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity. C Tenable Network Security, Inc. include"compat.inc"; if description...

Xedus Web Server Traversal Arbitrary File Access

The remote host runs Xedus Peer-to-Peer web server. This version is vulnerable to directory traversal. An attacker could send a specially crafted URL to view arbitrary files on the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid14645; scriptversion"1.23";...

AIX 5.1 : IY48658

The remote host is missing AIX Critical Security Patch number IY48658 Sendmail prescan vulnerability. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 5.2 : IY48657

The remote host is missing AIX Critical Security Patch number IY48657 Sendmail prescan vulnerability. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...