PHP3 Physical Path Disclosure Vulnerability

PHP3 will reveal the physical path of the webroot when asked for a non-existent PHP3 file if it is incorrectly configured. Although printing errors to the output is useful for debugging applications, this feature should not be enabled on production servers. OpenVAS Vulnerability Test $Id:...

pcAnywhere Service Detection (UDP)

UDP based detection of pcAnywhere. SPDX-FileCopyrightText: 2005 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10006";...

UDDI Detection (HTTP)

The tested Web server seems to be friendly to UDDI requests. The server could be potentially offering web services under some other directory we only tested the web root directory SPDX-FileCopyrightText: 2005 John Lampe Some text descriptions might be excerpted from a referenced sources, and are...

Check if the SMTP server accepts us

This script does not perform any security test. It verifies that the scanner is able to connect to the remote SMTP server and that it can send a HELO request. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Webseal DoS Vulnerability

The remote web server dies when an URL ending with %2E is requested. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HTTP Negative Content-Length DoS Vulnerability

The Savant web server was crashed by sending an invalid GET HTTP request with a negative Content-Length field. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Abyss httpd DoS

It was possible to kill the web server by sending a MS-DOS device names in an HTTP request. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Netscape /.perf accessible

Requesting the URI /.perf gives information about the currently running Netscape/iPlanet web server. SPDX-FileCopyrightText: 2003 Sullo Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

HTTP Version Number Overflow DoS Vulnerability

It was possible to kill the web server by sending an invalid GET request with a too long HTTP version field. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CGIEmail's CGICso (Send CSO via CGI) Command Execution Vulnerability

The remote host seems to be vulnerable to a security problem in CGIEmail cgicso. The vulnerability is caused by inadequate processing of queries by CGIEmail SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001 SecurITeam Some text descriptions might be excerpted from a reference...

Open WebMail Logindomain Parameter Cross-Site Scripting Vulnerability

The remote webmail server is affected by a cross-site scripting flaw. The remote host is running at least one instance of Open WebMail that fails to sufficiently validate user input supplied to the SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a...

DB2 DOS

It was possible to crash the DB2 database by sending just one byte to it. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SMTP server accepts us

This script does not perform any security test. It verifies that OpenVAS that connect to the remote SMTP server and that it can send a HELO request. OpenVAS Vulnerability Test $Id: checksmtphelo.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SMTP server accepts us Authors: Michel Arboi...

Check Point SecureRemote (SecuRemote) Information Disclosure Vulnerability - Active Check

The remote host seems to be a Check Point FireWall-1 running SecureRemote SecuRemote. The SecuRemote service contains a vulnerability that allows attackers to gain information about the hosts, networks, and users configured on the Firewall. SPDX-FileCopyrightText: 2001 SecuriTeam Some text...

amap (NASL wrapper)

This VT is deprecated. Copyright C 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under th...

ReadDesign checker

This plugin checks for ReadDesign vulns on the remote web server. SPDX-FileCopyrightText: 2005 Net-Square Solutions Pvt Ltd. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

QMTP Detection

Checks for the presence of QMTP/QMQP server. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Too long line

It was possible to kill the service by sending a single long text line. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zeroboard < 4.1pl6 XSS Vulnerability - Active Check

Zeroboard is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HTTP 1.1 Header Overflow DoS Vulnerability

It was possible to kill the web server by sending an invalid request with a too long HTTP 1.1 header Accept-Encoding, Accept-Language, Accept-Range, Connection, Expect, If-Match, If-None-Match, If-Range, If-Unmodified-Since, Max-Forwards, TE, Host SPDX-FileCopyrightText: 2002 Michel Arboi Some te...