ViRobot Linux Server addschup Multiple Overflows

The remote host is running ViRobot Linux Server, a commercial anti- virus product for Linux. According to its banner, the installed version of ViRobot Linux Server suffers from a remote buffer overflow vulnerability in its web-based management interface. By passing specially crafted data through...

ViRobot Advanced Server 2.0 - 'addschup' Remote Cookie

!/usr/bin/perl ViRobot 2.0 remote cookie exploit - ala addschup copyright Kevin Finisterre kflistsatdigitalmunitiondotcom jdam:/home/kfinisterre ls -al /var/spool/cron/root ls: /var/spool/cron/root: No such file or directory jdam:/home/kfinisterre ls -al /var/spool/cron/root -rw-r--r-- 1 root sta...

ProductCart Multiple Scripts SQL Injection

The remote host is running a version of the ProductCart shopping cart software that fails to properly sanitize user-supplied input before using it in SQL queries. An attacker may be able to exploit these flaws to alter database queries, disclose sensitive information, or conduct other such attack...

Invision Board < 2.0.5 Privilege Escalation / SQL Injection

Binary data 2942.prm...

Kibuv Worm Detection

The welcome message on this port matches the banner of a known backdoor. This is highly suspicious. The host is probably infected by a backdoor and is probably under the control of malicious attackers. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid18367; scriptversio...

Netref cat_for_gen.php Arbitrary PHP Command Injection

The remote host is running the Netref directory script, written in PHP. There is a vulnerability in the installed version of Netref that enables a remote attacker to pass arbitrary PHP script code through the 'ad', 'addirect', and 'mforracine' parameters of the 'catforgen.php' script. This code...

Woppoware PostMaster <= 4.2.2 Multiple Vulnerabilities

According to its banner, the version of Woppoware Postmaster on the remote host suffers from multiple vulnerabilities: - An Authentication Bypass Vulnerability An attacker can bypass authentication by supplying an account name to the 'email' parameter of the 'message.htm' page. After this, the...

myServer Multiple Vulnerabilities

Binary data 2892.prm...

Advanced Guestbook index.php entry Parameter SQL Injection

The remote host is running Advanced Guestbook - a guestbook written in PHP. The remote version of this software contains an input validation flaw leading to a SQL injection vulnerability. An attacker may exploit this flaw to execute arbitrary commands against the remote database. %NASLMINLEVEL...

602LAN SUITE Open Telnet Proxy

The remote host is running 602LAN SUITE with an open Telnet server proxy. By using through such a proxy, an attacker may be able to launch attacks that appear to originate from the remote host and possibly to access resources that are only available to machines on the same internal network as the...

PostgreSQL < 8.0.3 Multiple Vulnerabilities

According to its banner, the version of PostgreSQL installed on the remote host may suffer from the following vulnerabilities : - Character Conversion Vulnerability Unprivileged users can call functions supporting client- server character set conversion from SQL commands even though those functio...

RHEL 4 : nasm (RHSA-2005:381)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:381 advisory. NASM is an 80x86 assembler. Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM file in such a way...

bBlog <= 0.7.4 Multiple Vulnerabilities (SQLi, XSS)

The remote host is running bBlog, an open source blog software application. According to its banner, the remote version of this software suffers from several vulnerabilities: - A SQL Injection Vulnerability It is reportedly possible to inject SQL statements through the 'postid' parameter of the...

Oracle Application Server 9i Webcache < 9.0.4.0 Multiple Vulnerabilities

According to its banner, the version of Oracle Application Server 9i Webcache installed on the remote host suffers from several flaws: - Arbitrary File Corruption Vulnerability An attacker may be able to corrupt arbitrary files on the remote host by passing the filenames through the 'cachedumpfil...

Kerio Mailserver Admin Service Detection

The remote host appears to be running the Kerio Admin MailServer Admin Service on this port. Copyright C 2005 Secure Computer Group. University of A Coruna This script was written by Javier Munoz Mellid This script is released under the GNU GPL v2 Changes by Tenable: - Revised plugin title, remov...

phpBB <= 2.0.14 Multiple Vulnerabilities

According to its banner, the remote host is running a version of phpBB that suffers from multiple flaws: - A BBCode Input Validation Vulnerability The application fails to properly filter for the BBCode URL in the 'includes/bbcode.php' script. With a specially crafted URL, an attacker could cause...

PMSoftware Simple Web Server (GET Request) Remote BoF Exploit

No description provided by source. / PMSoftware Simple Web Server Buffer Overflow Exploit 3 targets cybertronicatgmxdotnet 04/25/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic - cybertronicatgmxdotnet...

RHEL 4 : HelixPlayer (RHSA-2005:392)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:392 advisory. HelixPlayer is a media player. A buffer overflow bug was found in the way HelixPlayer processes RAM files. An attacker could create a specially crafte...

Solaris 9 (x86) : 114263-06

SunOS 5.9x86: libgss.so.1 Patch. Date this patch was last updated by Sun : Aug/25/06 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Firefox < 1.0.3 Multiple Vulnerabilities

The remote version of this software contains various security issues that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. if NASLLEVEL 3004 exit1; include"compat.inc"; ifdescription scriptid18064; scriptversion"1.22"; scriptcveid "CVE-2005-0752...