AIX 5.1 : IY40501

The remote host is missing AIX Critical Security Patch number IY40501 SECURITY: buffer overflow in sendmail. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Medal of Honor Multiple Remote Overflows

The remote host was running the Medal of Honor game server. The version installed on the remote host is vulnerable to a remote attack that allows for arbitrary code execution. Note that Nessus has disabled this service in testing for this flaw. C Tenable Network Security, Inc. include"compat.inc"...

ASPrunner 2.4 Multiple Vulnerabilities

The remote host is running ASPrunner prior to version 2.5. There are multiple flaws in this version of ASPrunner which would enable a remote attacker to read and/or modify potentially confidential data. An attacker, exploiting this flaw, would need access to the web server via the network...

Mandrake Linux Security Advisory : openssh (MDKSA-2002:019)

Joost Pol found a bug in the channel code of all versions of OpenSSH from 2.0 to 3.0.2. This bug can allow authenticated users with an existing account on the vulnerable system to obtain root privilege or by a malicious server attacking a vulnerable client. OpenSSH 3.1 is not vulnerable to this...

Solaris 8 (x86) : 116442-01

SunOS 5.8x86: Solaris sadmind default sec. Date this patch was last updated by Sun : Feb/06/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 2.5.1 (sparc) : 108363-02

The remote host is missing Sun Security Patch number 108363-02 CDE 1.0.2: libDtSvc Patch. Date this patch was last updated by Sun : Tue Dec 04 04:58:34 MST 2001 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

Solaris 9 (sparc) : 116453-03

SunOS 5.9: sadmind patch. Date this patch was last updated by Sun : May/21/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (x86) : 109327-24

SunOS 5.8x86: libresolv.so.2, in.named an. Date this patch was last updated by Sun : Mar/09/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 109320-22

SunOS 5.8: lp patch. Date this patch was last updated by Sun : Nov/07/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid13319;...

Solaris 8 (sparc) : 116455-01

SunOS 5.8: Solaris sadmind default securit. Date this patch was last updated by Sun : Feb/06/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 109077-21

SunOS 5.8: dhcp server and admin patch. Date this patch was last updated by Sun : Nov/06/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Default Password (12345678) for 'root' Account on MacOS X Server

Nessus was able to login to the remote host using the following credentials : Username : root Password : 12345678 On older Macintosh computers, Mac OS X server is configured with this default account on newer computers, the serial number of the system is used instead. C Tenable Network Security,...

FreeBSD : SA-04:10.cvs

The remote host is running a version of FreeBSD which contains a heap overflow in the cvs pserver code. This flaw may be used by an attacker to execute arbitrary code on the remote host, provided that it's running a cvs pserver. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

FreeBSD : SA-04:12.jailroute

The remote host is running a version of the FreeBSD kernel which contains a bug which may allow a jailed process to modify the host routing tables of the whole system. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc"; ifdescription scriptid12555;...

Unreal Engine Secure Query Remote Overflow

The remote host was running a game server with the Unreal Engine on it. The game server is vulnerable to a remote attack which allows for arbitrary code execution. Note that Nessus disabled this service while testing for this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

MS04-011: Security Update for Microsoft Windows (835732) (uncredentialed check)

The remote version of Windows contains a flaw in the function 'DsRolerUpgradeDownlevelServer' of the Local Security Authority Server Service LSASS that allows an attacker to execute arbitrary code on the remote host with SYSTEM privileges. A series of worms Sasser are known to exploit this...

Aborior Encore WebForum display.cgi file Parameter Command Execution

The remote host is running the Aborior Web Forum. There is a flaw in this version that could allow an attacker to execute arbitrary commands on this server with the privileges of the affected web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

Serv-U MDTM Command Overflow

The remote host is running Serv-U FTP server. There is a bug in the way this server handles arguments to the MDTM requests that could allow an attacker to trigger a buffer overflow in this server and disable it remotely or potentially execute arbitrary code on the host. C Tenable Network Security...

TYPSoft FTP Server 1.10 Invalid Path Request DoS

The remote host appears to be running TYPSoft FTP server. According to its banner, this version of the software has a denial of service vulnerability that can lead to complete exhaustion of CPU resources. This script was written by Audun Larsen Changes by Tenable: - Revised plugin title 2/03/2009...

Sami FTP Server Multiple DoS

The remote host is running SAMI FTP server. There is a bug in the way this server handles certain FTP command requests that may allow an attacker to crash the affected service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12061; scriptversion"1.23";...