Microsoft Windows Messenger Service Social Engineering Weakness

The messenger service is running. This service allows NT users to send pop-up messages to each other. This service can be abused by anyone who can trick valid users into doing some actions that may harm their accounts or your network social engineering attack. C Tenable Network Security, Inc...

AVM KEN! ISDN Proxy Server Malformed Request Remote DoS

It was possible to crash the remote service - very likely Ken! ISDN Proxy Software - by sending it a non-HTTP request. Note that in the case of the Ken!, exploitation requires that the attacker be on the local network. C Tenable Network Security, Inc. include"compat.inc"; if description...

Pocsag POC32 Remote Service Default Password (password)

It is possible to log into the remote pocsag service and view the streams of decoded pager messages using the password 'password'. An attacker may use this problem to gain some knowledge about the computer user and then trick him by social engineering. C Tenable Network Security, Inc...

Knox Arkeia Backup Service Buffer Overflow

It was possible to overflow a buffer in the Knox's Arkeia server. This problem allows an attacker to perform a denial of service attack and to gain root using the remote service if the attacker is local. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10018;...

Multiple Unix Netstat Service Remote Information Disclosure

The remote host is running a 'netstat' service on this port. The 'netstat' service provides useful information to an attacker, since it gives away the state of the active connections. It is recommended that you disable this service if you do not use it. C Tenable Network Security, Inc. include...

Finger 0@host Unused Account Disclosure

The remote host is running a 'finger' service that suffers from an information disclosure vulnerability. Specifically, it allows an unauthenticated attacker to display a list of accounts on the remote host that have never been used. This list can help an attacker to guess the operating system typ...

PsExec via Current User Token

This module uploads an executable file to the victim system, creates a share containing that executable, creates a remote service on each target system using a UNC path to that file, and finally starts the services. The result is similar to psexec but with the added benefit of using the session's...