UltraVNC w/ DSM Plugin Detection (2)

UltraVNC seems to be running on the remote port. Upon connection, the remote service on this port sends pseudo-random bytes. It is probably UltraVNC with the new DSM encryption plugin. This plugin tunnels the RFB protocol into a RC4 or AES encrypted stream. %NASLMINLEVEL 70300 C Tenable Network...

Symantec Web Security (SWS) Multiple Vulnerabilities

According to its banner, the version of Symantec Web Security on the remote host is vulnerable to denial of service and cross-site scripting attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid25446;...

CA BrightStor ARCserve (msgeng.exe) Remote Heap Overflow Exploit 2

Exploit for unknown platform in category remote exploits ================================================================== CA BrightStor ARCserve msgeng.exe Remote Heap Overflow Exploit 2 ================================================================== !/usr/bin/perl original exploit by...

SSL Cipher Suites Supported

This plugin detects which SSL ciphers are supported by the remote service for encrypting communications. TRUSTED...

Ipswitch IMail Format String and 'LIST' Command DoS

Binary data 3317.prm...

OmniHTTPd pro long POST DoS

The remote host is running OmniHTTPd Pro HTTP Server. The remote version of this software seems to be vulnerable to a buffer overflow when handling specially long POST request. This may allow an attacker to crash the remote service, thus preventing it from answering legitimate client requests...

Microsoft SQL Server (MSSQL) Hello Overflow Vulnerability (Q316333) - Active Check

Microsoft SQL Server MSSQL is prone to a hello overflow vulnerability. SPDX-FileCopyrightText: 2002 Dave Aitel Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Tutos < 1.1.20040412 Input Validation Vulnerability

Tutos is prone to an input validation vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:tutos:tutos"; ifdescriptio...

INN buffer overflow

The remote version of this INN InterNetNews server does not do proper bounds checking. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

slident / fake identd Detection

The remote ident/authd server returns random tokens instead of leaking real user IDs this is a good thing. It may be slidentd or some other fake identd. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid18373; scriptversion "$Revision: 1.17 $"; scriptcvsdate"$Date:...

Network Service Malformed Data Remote DoS

It appears to be possible to crash the remote service by sending it a few kilobytes of random data. An attacker may use this flaw to make this service crash continuously, preventing this service from working properly. It may also be possible to exploit this flaw to execute arbitrary code on this...

Namazu < 2.0.14 Multiple Vulnerabilities

The remote host is running Namazu - a web-based search engine. The remote version of this software has various flaws that may allow an attacker to perform a cross-site scripting attack using the remote host or to execute arbitrary code on the remote system with the privileges of the web server...

Nucleus CMS < 3.15 Multiple Vulnerabilities

The remote host is running Nucleus CMS, an open source content management system. The remote version of this software is vulnerable to various flaws that may allow an attacker to perform a cross-site scripting attack using the remote host and to perform a SQL injection attack on the remote...

DMS POP3 Server (1.5.3 build 37) Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== DMS POP3 Server 1.5.3 build 37 Buffer Overflow Exploit ======================================================== ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl...

FreeBSD Ports : FreeRADIUS < 1.0.1

The remote host has the following package installed : 0.8.0 = freeradius 1.0.1 The remote version of this software is vulnerable to a flaw which may allow an attacker to disable this service remotely. C Tenable Network Security if ! definedfunc"bnrandom" exit0; include"compat.inc"; ifdescription...

NIS passwd.byname Map Disclosure

This script fetches the remote NIS 'passwd.byname' map, provided that the NIS domain name could be obtained. C Tenable Network Security, Inc. include 'compat.inc' ; if description scriptid12238; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:37"; scriptnameenglish:"NIS passwd.byname Ma...

OpenSSL < 0.9.6m / 0.9.7d Multiple Remote DoS

According to its banner, the remote host is using a version of OpenSSL which is older than 0.9.6m / 0.9.7d. There are several bugs in such versions that may allow an attacker to cause a denial of service against the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

EffectOffice Server 2.6 - Remote Service Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/9077/info A problem has been reported the service used by EffectOffice Server. Because of this, it may be possible for a remote user to deny service to legitimate users of the software. hacker telnet telnet open to attackhost 56004 Trying attackhost...

Open Shortest Path First (OSPF) Agent Detection

The remote host is running OSPF, a popular routing protocol. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. RFC 1247 / RFC 2328 OSPF v2 The OSPF protocol runs directly over IP, using IP protocol 89. Routing protocol packets should always be sent with the IP TOS field set to 0. Table 8: OSPF...

FileMaker Pro Client Request User Passwords Remote Disclosure

The remote host is running a FileMakerPro server. There is a flaw in the design of the FileMakerPro server which makes the database authentication occur on the client side. A remote attacker could exploit this flaw to gain access to databases by connecting to this port with a rogue client. C...