FakeBO format satring bug

Format string bug during syslog call with remote host name...

Bugbear.B Web Backdoor Detection

Your system seems to be infected by the Bugbear.B virus its backdoor has been detected on port 81. C 2003 StrongHoldNet Licence : GPL v2 Modifications by rd: - Try every web server, not just port 81 UNTESTED include"compat.inc"; if description scriptid11707; scriptversion "1.11";...

Cisco IDS Device Manager Detection

This host is running the Cisco IDS device manager. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11689; scriptversion "1.16"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Cisco IDS Device Manager Detection"; scriptsummaryenglish:"Cisco IDS Management Web Serve...

ST FTP Service Arbitrary File/Directory Access

The remote FTP server is vulnerable to a flaw that allows users to access files that are outside the FTP server root. An attacker may break out of his FTP jail by issuing the command : CWD C: TRUSTED...

Microsoft Media Services ISAPI nsiislog.dll Multiple Overflows

Some versions of IIS shipped with a default file, nsiislog.dll, within the /scripts directory. Nessus has determined that the remote host has the file installed. The NSIISLOG.dll CGI may allow an attacker to execute arbitrary commands on this host, through a buffer overflow. C Tenable Network...

Lovgate Virus Detection

The remote host seems to be infected with the 'lovgate' virus which opens a command prompt shell on this port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11633; scriptversion "1.13"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Lovgate Virus Detection";...

ttforum Multiple Vulnerabilities

The remote host is running ttforum. This set of CGI is vulnerable to various attacks which may allow an attacker to execute arbitrary code on this host or gain administrative privileges on this forum. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: 9 May 2003 16:58:36 -0000 From:...

phPay admin/phpinfo.php Information Disclosure

The remote host is running phPay, an online shop management system. This package contains multiple information leakages that could allow an attacker to obtain the physical path of the installation on the remote host or even the exact version of the components used by the remote host by using the...

IMAP Service Banner Retrieval

An IMAP Internet Message Access Protocol server is installed and running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11414; scriptversion "$Revision: 1.11 $"; scriptnameenglish:"IMAP Service Banner Retrieval"; scriptcopyrightenglish:"This script...

Sun ONE (iPlanet) Application Server Detection

The remote host is running Sun ONE Application Server formerly known as iPlanet Application Server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid11402; scriptversion"1.19";...

L2TP Network Server Detection

The report host understands the L2TP tunneling protocol and appears to be a VPN endpoint, or more specifically, an L2TP Network Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11387; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate",...

l2tpd < 0.68 Multiple Vulnerabilities

The remote host is running a version of l2tpd prior to 0.67. This version is vulnerable to a buffer overflow that could allow an attacker to gain a root shell on this host. In addition, this program does not initialize its random number generator. Therefore, an attacker may predict some key value...

Irix Performance Copilot Service Information Disclosure

The service 'IRIX performance copilot' is running. This service discloses sensitive information about the remote host, and may be used by an attacker to perform a local denial of service. This warning may be a false positive since the presence of the bug was not verified locally. C Tenable Networ...

NFS Exported Share Information Disclosure

At least one of the NFS shares exported by the remote server could be mounted by the scanning host. An attacker may be able to leverage this to read and possibly write files on remote host. Note: Shares protected by an ACL that includes the IP of the Nessus host will not be tested. C Tenable...

Discard Service Detection

The remote host is running a 'discard' service. This service typically sets up a listening socket and will ignore all the data which it receives. This service is unused these days, so it is advised that you disable it. This script was written by Vincent Renardias See the Nessus Scripts License fo...

IBM Lotus Domino Directory Traversal Arbitrary File Access

It is possible to read arbitrary files on the remote server by prepending %00%00.nsf/../ in front of it. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11344; scriptversion"1.26";...

Virus Infection Detection (deprecated)

This script checks for the presence of different viruses on the remote host, by using the SMB credentials that you provide to Nessus. - W32/Badtrans-B - JSGIGGER.A@mm - W32/Vote-A - W32/Vote-B - CodeRed - W32.Sircam.Worm@mm - W32.HLLW.Fizzer@mm - W32.Sobig.B@mm - W32.Sobig.E@mm - W32.Sobig.F@mm -...

TCP/IP Predictable ISN (Initial Sequence Number) Generation Weakness

The remote host has predictable TCP sequence numbers. An attacker may use this flaw to establish spoofed TCP connections to this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10443; scriptversion"1.31"; scriptcvsdate"Date: 2019/03/06 18:38:55"; scriptcveid...

TYPO3 < 3.5.0 Multiple Vulnerabilities

The remote host is running an old version of TYPO3. An attacker can use it to read arbitrary files and execute arbitrary commands on this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. From: Martin Eiszner To: [email protected] Subject: typo3 issues Message-Id:...

PHP-Nuke Detection

The remote host is running a copy of PHP-Nuke. Given the insecurity history of this package, the Nessus team recommends that you do not use it but use something else instead, as security was clearly not in the mind of the persons who wrote it. The author of PHP-Nuke Francisco Burzi even started t...