MS08-052: Vulnerabilities in GDI+ Could Allow Remote Code Execution (954593)

The remote host is running a version of Windows that has multiple buffer overflow vulnerabilities when viewing VML, EMF, GIF, WMF and BMP files that could allow an attacker to execute arbitrary code on the remote host. To exploit these flaws, an attacker would need to send a malformed image file ...

Open Azimyt CMS <= 0.22 (lang) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-026 Application: Open Azimyt CMS Versions Affected: 0.22 minimal, 0.21 stable Vendor URL: http://azimyt.net/ Bug: Local File Include Exploits: YES Reported: 07.06.2008 Vendor Response: 08.06.2008 Solution...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 5010)

This version update to 8.1.2 fixes numerous bugs, including some security problems. CVE-2008-0667 / CVE-2008-0655 / CVE-2008-0726 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

MS08-001: Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (941644)

The remote version of Windows contains a version of the TCP/IP protocol that does not properly parse IGMPv3, MLDv2 and ICMP structure. An attacker may exploit these flaws to execute code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29893;...

RunCMS 1.6 - Multiple Vulnerabilities

RunCMS 1.6 - Multiple Vulnerabilities Digital Security Research Group Advisory Application: RunCMS Versions Affected: RunCMS 1.6 Vendor URL: http://www.runcms.org Bugs: SQL Injections, XSS, PHP Include, Predictable session id, etc. Exploits: Aviable Reported: 14.12.2007 Vendor response: 15.12.200...

MS07-062: Vulnerability in DNS Could Allow Spoofing (941672)

The remote host has the Windows DNS server installed. There is a flaw in the remote version of this server that could allow an attacker to spoof DNS responses. By exploiting this flaw, an attacker may be able to redirect legitimate traffic from other systems that could allow him to construct more...

Joomla! CMS com_search Component 'searchword' Parameter RCE

The version of Joomla! running on the remote host is affected by a remote code execution vulnerability within the comsearch/views/search/tmpl/defaultresults.php script due to improper sanitization of user-supplied input to the 'searchword' parameter before passing it to the eval function. An...

Sun Java JRE Font Parsing Privilege Escalation (103024)

According to its version number, the Sun Java Runtime Environment JRE installed on the remote host reportedly contains an issue in its font parsing code that may allow an untrusted applet to gain elevated privileges and, for example read or write local files or execute local applications...

MS07-027: Cumulative Security Update for Internet Explorer (931768)

The remote host is missing the IE cumulative security update 931768. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

CA BrightStor ARCserve Backup for Laptops & Desktops Server Multiple Vulnerabilities (QO83833)

According to its version, the installation of BrightStor ARCserve Backup for Laptops & Desktops Server on the remote host is affected by multiple buffer overflows and denial of service vulnerabilities that can be exploited by a remote attacker to execute arbitrary code on the affected host with...

FreeBSD : gtar -- GNUTYPE_NAMES directory traversal vulnerability (3dd7eb58-80ae-11db-b4ec-000854d03344)

Teemu Salmela reports : There is a tar record type, called GNUTYPENAMES an obsolete GNU extension, that allows the creation of symbolic links pointing to arbitrary locations in the filesystem, which makes it possible to create/overwrite arbitrary files. %NASLMINLEVEL 70300 C Tenable Network...

Exhibit Engine styles.php toroot Parameter Remote File Inclusion

The remote web server is running Exhibit Engine, a PHP based photo gallery management system. The version of Exhibit Engine installed on the remote host fails to sanitize input to the 'toroot' parameter before using it in the 'styles.php' script to include PHP code. Provided PHP's 'registerglobal...

Solaris 7 (sparc) : 110531-01

The remote host is missing Sun Security Patch number 110531-01 AnswerBook 1.4.2: HTTP GET overflow allows code execution. Date this patch was last updated by Sun : Wed Nov 23 04:24:08 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 5.8 (sparc) : 120185-19

StarOffice 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 5.10 (sparc) : 120185-19

StarOffice 8 Solaris: Update 14. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

MS05-038: Cumulative Security Update for Internet Explorer (896727)

The remote host contains a version of the Internet Explorer that is vulnerable to multiple security flaws JPEG Rendering, Web Folder, COM Object that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit this web pag...

MS05-027: Vulnerability in SMB Could Allow Remote Code Execution (896422) (uncredentialed check)

The remote version of Windows contains a flaw in the Server Message Block SMB implementation that may allow an attacker to execute arbitrary code on the remote host. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

Xedus Webserver Connection Saturation DoS

The remote host runs Xedus Peer-to-Peer web server. This version is vulnerable to a denial of service. An attacker could stop the web server from accepting user requests by establishing multiple connections from the same host. C Tenable Network Security, Inc. include"compat.inc"; if description...

Mozilla Browsers shell: URI Arbitrary Command Execution

The remote host is using Mozilla and/or Firefox, a web browser. The remote version of this software contains a weakness that could allow an attacker to execute arbitrary commands on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12642;...

smallftpd 1.0.3 Multiple DoS

The remote host seems to be running a version of Smallftpd that is 1.0.3 or earlier. Such versions are reportedly affected by denial of service and directory traversal vulnerabilities. This script was written by Audun Larsen Changes by Tenable: - Revised plugin title, changed family 2/03/2009 -...