Sophos Anti Virus Check

This plugin checks that the remote host has the Sophos Antivirus installed and that it is running. The script logs in via SMB, searches for Sophos Antivirus in the registry and gets the version from SPDX-FileCopyrightText: 2005 Jason Haar Some text descriptions might be excerpted from a reference...

Trend Micro IMSS Console Management Detection (HTTP)

The remote host appears to run Trend Micro Interscan Messaging Security Suite, connections are allowed to the web console management. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

Ultimate PHP Board Information Leak

The remote host is running Ultimate PHP Board UPB. There is a flaw in this version which may allow an attacker to view private message board information. OpenVAS Vulnerability Test $Id: upbinfoleak.nasl 5780 2017-03-30 07:37:12Z cfi $ Description: Ultimate PHP Board Information Leak Authors: Erik...

Chora Detection

This script detects whether the remote host is running Chora and extracts version numbers and locations of any instances found. Chora is a PHP-based interface to CVS repositories from the Horde Project. See http://www.horde.org/chora/ for more information. OpenVAS Vulnerability Test $Id:...

DistCC Detection

Tries to detect if the remote host is running a DistCC service. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Horde IMP Detection

This script detects whether the remote host is running Horde IMP and extracts version numbers and locations of any instances found. IMP is a PHP-based webmail package from The Horde Project that provides access to mail accounts via POP3 or IMAP. SPDX-FileCopyrightText: 2005 George A. Theall Some...

TYPSoft directory traversal flaw

The remote host seems to be running TYPSoft FTP earlier than 0.97.5 This version is prone to directory traversal attacks. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PowerPortal Path Dislcosure

The remote host is using PowerPortal, a content management system, written in PHP. A vulnerability exists in the remote version of this product which may allow a remote attacker to cause the product to disclose the path it is installed under. An attacker may use this flaw to gain more knowledge...

WackoWiki XSS

The remote host seems to be running the WackoWiki CGI suite and may be vulnerable to a remote authentication attack. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Horde 3.0 XSS Vulnerability

Horde is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

phpBB < 2.0.9 SQLi Vulnerability

phpBB is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpbb:phpbb";...

Microsoft IIS IDA/IDQ Path Disclosure Vulnerability (MS00-006) - Active Check

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions. SPDX-FileCopyrightText: 2000 Filipe Custodio Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

POP2 Unencrypted Cleartext Login

The remote host is running a POP2 daemon that allows cleartext logins over unencrypted connections. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

eZ/eZphotoshare Denial of Service

The remote host runs eZ/eZphotoshare, a service for sharing and exchanging digital photos. This version is vulnerable to a denial of service attack. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

DameWare Mini Remote Control Information Disclosure

The remote host is running DameWare Mini Remote Control. This program allows remote attackers to determine the OS type and which Service Pack is installed on the server. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...

FuseTalk forum XSS

The remote host is using FuseTalk, a web based discussion forum. A vulnerability exists in the script SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Internet Explorer 5.01, 5.5, 6.0 Cumulative Patch (890923, MS05-020)

The July 2004 Cumulative Patch for IE is not applied on the remote host. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Also supersedes...

cfengine format string vulnerability

Cfengine is running on this remote host. Cfengine contains a component, cfd, which serves as a remote-configuration client to cfengine. This version of cfd contains several flaws in the way that it calls syslog. As a result, trusted hosts and valid users if access controls are not in place can...

RSA Security RSA Authentication Agent For Web XSS

The remote host seems to be running the RSA Security RSA Authentication Agent for web. The remote version of this software is contains an input validation flaw in the 'postdata' variable. An attacker may use it to perform a cross site scripting attack. OpenVAS Vulnerability Test $Id:...

MDaemon imap server DoS

The remote host is running the MDaemon IMAP server. It is possible to crash the remote version of this softare sending a long argument to the 'LOGIN' command. This problem allows an attacker to make the remote service crash, thus preventing legitimate users from receiving e-mails. OpenVAS...