Infinite HTTP request

It was possible to kill the web server by sending an invalid 'infinite' HTTP request that never ends. A cracker may exploit this vulnerability to make your web server crash continually or even execute arbirtray code on your system. OpenVAS Vulnerability Test $Id: wwwinfiniterequestDoS.nasl 6053...

w3who.dll overflow and XSS

The Windows 2000 Resource Kit ships with a DLL that displays the browser client context. It lists security identifiers, privileges and $ENV variables. OpenVAS has determined that this file is installed on the remote host. The w3who.dll ISAPI may allow an attacker to execute arbitrary commands on...

SMTP server accepts us

This script does not perform any security test. It verifies that OpenVAS that connect to the remote SMTP server and that it can send a HELO request. OpenVAS Vulnerability Test $Id: checksmtphelo.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SMTP server accepts us Authors: Michel Arboi...

ncrack: ftp

This plugin runs ncrack to find ftp accounts & passwords by brute force. OpenVAS Vulnerability Test ftp Remote password cracking using ncrack svn co svn://svn.insecure.org/nmap-exp/ithilgore/ncrack Tested with SVN r14943. Based on hydra scripts by Michel Arboi Authors: Vlatko Kosturjak This progr...

DB4Web directory traversal

It is possible to read any file on your system through the DB4Web software. OpenVAS Vulnerability Test $Id: db4webdirtrav.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: DB4Web directory traversal Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free software; y...

alya.cgi

alya.cgi is a cgi backdoor distributed with multiple rootkits. OpenVAS Vulnerability Test $Id: alya.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: alya.cgi Authors: Jason Lidow Copyright: Copyright C 2002 Jason Lidow This program is free software; you can redistribute it and/or modify it...

GAMSoft TelSrv 1.4/1.5 Overflow

It is possible to crash the remote telnet server by sending a username that is 4550 characters long. An attacker may use this flaw to prevent you from administering this host remotely. OpenVAS Vulnerability Test $Id: TelSrvDoS.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: GAMSoft TelSrv...

IlohaMail Contacts Deletion Vulnerability

The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions contain a flaw that enables an authenticated user to delete contacts belonging to any user provided the DB-based backend is used to store contacts. The flaw arises because ownership of 'deleteitem...

SunFTP Buffer Overflow

Buffer overflow in SunFTP build 91 allows remote attackers to cause a denial of service or possibly execute arbitrary commands by sending more than 2100 characters to the server. OpenVAS Vulnerability Test $Id: sunftpdoverflow.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SunFTP Buffer...

ICECast libshout remote buffer overflow

The remote server runs a version of ICECast, an open source streaming audio server, which is older than version 1.3.9. Icecast and the libshout library are affected by a remote buffer overflow because they do not properly check bounds of data send from clients. As a result of this vulnerability, ...

ReadDesign checker

This plugin checks for ReadDesign vulns on the remote web server. For more information, see: https://www.appsecinc.com/Policy/PolicyCheck1520.html OpenVAS Vulnerability Test $Id: readdesigncheck.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: ReadDesign checker Authors: Hemil Shah Copyright:...

Misc information on News server

This script detects if the NNTP server is open to outside, counts the number of groups, and tries to post outside. This channel may been used by virus or trojan. OpenVAS Vulnerability Test $Id: nntpinfo.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Misc information on News server Authors:...

pcAnywhere TCP

pcAnywhere is running on this port OpenVAS Vulnerability Test $Id: PCanywheretcp.nasl 7552 2017-10-24 13:00:36Z cfischer $ Description: pcAnywhere TCP Authors: Georges Dagousset Changes by Tenable Network Security : cleanup + better detection Copyright: Copyright C 2001 Alert4Web.com This program...

Hidden WWW server name

It seems that your web server tries to hide its version or name, which is a good thing. However, using a special crafted request, OpenVAS was able to discover it. OpenVAS Vulnerability Test $Id: wwwservername.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Hidden WWW server name Authors:...

Moodle post.php XSS

The version of Moodle on the remote host contains a flaw that allows a remote cross site scripting attack because the application does not validate the 'reply' variable upon submission to the 'post.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary...

wu-ftpd MAIL_ADMIN overflow

The remote Wu-FTPd server seems to be vulnerable to a remote flaw. This version fails to properly check bounds on a pathname when Wu-Ftpd is compiled with MAILADMIN enabled resulting in a buffer overflow. With a specially crafted request, an attacker can possibly execute arbitrary code as the use...

SunSolve CD CGI user input validation

Sunsolve CD CGI scripts does not validate user input. Crackers may use them to execute some commands on your system. Note: OpenVAS did not try to perform the attack. OpenVAS Vulnerability Test $Id: sscdinput.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: SunSolve CD CGI user input validatio...

IMP HTML+TIME XSS Vulnerability

The remote server is running at least one instance of IMP whose version number is 3.2.4 or lower. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to inject arbitrary content, including script, in a specially crafted MIME message. To have an effect, the...

IMP Content-Type XSS Vulnerability

The remote server is running at least one instance of IMP whose version number is between 2.0 and 3.2.3 inclusive. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to cause a victim to unknowingly run arbitrary Javascript code simply by reading a MIME messa...

Xeneo web server %A DoS

It was possible to crash the remote Xeneo web server by requesting a malformed URL ending with /%A or /% OpenVAS Vulnerability Test $Id: xeneopercentDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Xeneo web server %A DoS Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This...