Microsoft ASP.NET Malformed File Request Path Disclosure

ASP.NET is vulnerable to a path disclosure attack. This allows an attacker to determine where the remote web root is physically stored in the remote file system, hence gaining more information about the remote system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Webmin Detection

The remote web server is running Webmin, a web-based interface for system administration for Unix. This script was written by Georges Dagousset See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, changed family 4/13/2009 - Added CPE, updated version check, updat...

Microsoft IIS ISAPI Filter Multiple Vulnerabilities (MS01-044)

There's a buffer overflow in the remote web server through the ISAPI filter. It is possible to overflow the remote web server and execute commands as user SYSTEM. Additionally, other vulnerabilities exist in the remote web server since it has not been patched. %NASLMINLEVEL 70300 C Tenable Networ...

Web Server HTTP POST Method Handling Remote Overflow DoS

Nessus tests the stability of a remote web service by sending a significantly large HTTP POST and then confirms if the web service is still responsive. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10687; scriptversion "1.25"; scriptcvsdate"Date: 2018/12/21 16:12:09"...

CVE-2001-0332: Undefined Security Weakness

Internet Explorer 5.5 and earlier does not properly verify the domain of a frame within a browser window, which allows remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different domain using MSScriptControl.ScriptControl and...

processit CGI Environment Variable Remote Information Disclosure

The 'processit' CGI is installed. processit normally returns all environment variables. This gives an attacker valuable information about the configuration of your web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

uStorekeeper ustorekeeper.pl file Parameter Traversal Arbitrary File Access

The 'ustorekeeper.pl' CGI script installed on the remote host allows an attacker to read arbitrary files subject to the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription...

SEDUM HTTP Server Long HTTP Request Overflow DoS

It was possible to make the remote web server crash by sending it too much data. An attacker may use this flaw to prevent this host from fulfilling its role. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10637; scriptversion"1.25"; scriptcvsdate"Date: 2018/07/27...

Commerce.CGI Shopping Cart commerce.cgi page Parameter Traversal Arbitrary File Access

The 'commerce.cgi' CGI is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10612;...

CVE-2000-0257

Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL...

CVE-2000-0257: Undefined Security Weakness

Buffer overflow in the NetWare remote web administration utility allows remote attackers to cause a denial of service or execute commands via a long URL...

Apache ASP module Apache::ASP source.asp Example File Arbitrary File Creation

The file /site/eg/source.asp is present on the remote Apache web server. This file comes with the Apache::ASP package and allows anyone to write to files in the same directory. An attacker may use this flaw to upload his own scripts and execute arbitrary commands on this host. C Tenable Network...

Microsoft IIS Dangerous Sample Files Detection

Some of the IIS sample files are present. They all contain various security flaws which could allow an attacker to execute arbitrary commands, read arbitrary files or gain valuable information about the remote system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script was written by...

Cobalt siteUserMod.cgi Arbitrary Password Modification

The Cobalt 'siteUserMod' CGI appears to be installed on the remote web server. Older versions of this CGI may allow a user with Site Administrator access to change the password of users on the system, such as Site Administrator or regular users, or the admin root user. Note that Nessus has only...

OpenLink Web Configurator GET Request Remote Overflow

It is possible to crash the remote web server by sending overly long GET requests. An attacker may exploit this issue to crash the remote web server or execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10169;...

Microsoft FrontPage Extensions authors.pwd Information Disclosure

The remote web server appears to be running with Microsoft FrontPage extensions. The file 'authors.pwd', which contains the encrypted passwords of FrontPage authors, can by accessed by anyone. A remote attacker could decrypt these passwords, or possibly overwrite this file. C Tenable Network...

Glimpse HTTP aglimpse Arbitrary Command Execution

The remote web server is running GlipmseHTTP. The installed version suffers from a remote command execution vulnerability in the 'aglimpse' component. Note that we could not actually check for the presence of this vulnerability, and only checked for the existence of the 'aglimpse' CGI...

CDomain whois_raw.cgi fqdn Parameter Arbitrary Command Execution

The remote host appears to be using the CdomainFree 'whoisraw.cgi' script. This CGI script allows an attacker to view any file on the target computer, as well as to execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

WebGais webgais CGI Arbitrary Command Execution

The 'webgais' CGI is installed. This CGI may let an attacker execute arbitrary commands with the privileges of the http daemon usually root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10300;...

thttpd Double Slash Request Arbitrary File Access

The remote HTTP server allows an attacker to read arbitrary files on the remote host with the privileges of the web server, simply by adding a slash in front of its name. For instance, 'GET //etc/passwd' will return the contents of the remote file '/etc/passwd'. C Tenable Network Security, Inc...