RHEL 4 : nasm (RHSA-2005:381)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:381 advisory. NASM is an 80x86 assembler. Two stack based buffer overflow bugs have been found in nasm. An attacker could create an ASM file in such a way...

bBlog <= 0.7.4 Multiple Vulnerabilities (SQLi, XSS)

The remote host is running bBlog, an open source blog software application. According to its banner, the remote version of this software suffers from several vulnerabilities: - A SQL Injection Vulnerability It is reportedly possible to inject SQL statements through the 'postid' parameter of the...

Oracle Application Server 9i Webcache < 9.0.4.0 Multiple Vulnerabilities

According to its banner, the version of Oracle Application Server 9i Webcache installed on the remote host suffers from several flaws: - Arbitrary File Corruption Vulnerability An attacker may be able to corrupt arbitrary files on the remote host by passing the filenames through the 'cachedumpfil...

Kerio Mailserver Admin Service Detection

The remote host appears to be running the Kerio Admin MailServer Admin Service on this port. Copyright C 2005 Secure Computer Group. University of A Coruna This script was written by Javier Munoz Mellid This script is released under the GNU GPL v2 Changes by Tenable: - Revised plugin title, remov...

phpBB <= 2.0.14 Multiple Vulnerabilities

According to its banner, the remote host is running a version of phpBB that suffers from multiple flaws: - A BBCode Input Validation Vulnerability The application fails to properly filter for the BBCode URL in the 'includes/bbcode.php' script. With a specially crafted URL, an attacker could cause...

PMSoftware Simple Web Server (GET Request) Remote BoF Exploit

No description provided by source. / PMSoftware Simple Web Server Buffer Overflow Exploit 3 targets cybertronicatgmxdotnet 04/25/2005 / / / / / / / / / / / / / / / / / / / // // / // / / / / // / / // / / / / / / /, /./// // // //// // -- exploit by : cybertronic - cybertronicatgmxdotnet...

RHEL 4 : HelixPlayer (RHSA-2005:392)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:392 advisory. HelixPlayer is a media player. A buffer overflow bug was found in the way HelixPlayer processes RAM files. An attacker could create a specially crafte...

Solaris 9 (x86) : 114263-06

SunOS 5.9x86: libgss.so.1 Patch. Date this patch was last updated by Sun : Aug/25/06 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Firefox < 1.0.3 Multiple Vulnerabilities

The remote version of this software contains various security issues that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. if NASLLEVEL 3004 exit1; include"compat.inc"; ifdescription scriptid18064; scriptversion"1.22"; scriptcveid "CVE-2005-0752...

PHP Photo Album < 2.0.14 Multiple Vulnerabilities

Binary data 2821.prm...

MS05-017: Vulnerability in MSMQ Could Allow Code Execution (892944) (uncredentialed check)

The remote version of Windows is affected by a vulnerability in Microsoft Message Queuing Service MSMQ. An attacker may exploit this flaw to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. Windows XP SP1 can be identified remotely without harm, n...

PostNuke < 0.760 RC4 Multiple XSS and SQL Injection Vulnerabilities

Binary data 2808.prm...

ProductCart Multiple Input Validation Vulnerabilities

The remote host is running a version of the ProductCart shopping cart software that suffers from several input validation vulnerabilities: - SQL Injection Vulnerabilities The 'advSearchh.asp' script fails to sanitize user input to the 'idCategory', and 'resultCnt' parameters, allowing an attacker...

GLSA-200504-04 : mit-krb5: Multiple buffer overflows in telnet client

The remote host is affected by the vulnerability described in GLSA-200504-04 mit-krb5: Multiple buffer overflows in telnet client A buffer overflow has been identified in the envoptadd function, where a response requiring excessive escaping can cause a heap-based buffer overflow. Another issue ha...

MaxWebPortal <= 1.33 Multiple Vulnerabilities

The remote host is running a version of MaxWebPortal that is prone to multiple input validation vulnerabilities: - Multiple SQL Injection Vulnerabilities An attacker can inject SQL statements via various scripts to manipulate database queries. - A Cross-Site Scripting Vulnerability An attacker ca...

Mailreader network.cgi enriched/richtext MIME Message XSS

According to its banner, the version of Mailreader installed on the remote host is affected by a remote HTML injection vulnerability due to its failure to properly sanitize messages using a 'text/enriched' or 'text/richtext' MIME type. An attacker can exploit this flaw by sending a specially...

PhotoPost < 5.1 Multiple Input Validation Vulnerabilities

The version of PhotoPost PHP installed on the remote host is prone to multiple input validation vulnerabilities: o Multiple SQL Injection Vulnerabilities The application fails to properly sanitize user-input via the 'sl' parameter of the 'showmembers.php' script, and the 'photo' parameter of the...

PhotoPost < 5.02 RC3 Multiple Content-parsing Vulnerabilities

Binary data 2778.prm...

RHEL 4 : mysql (RHSA-2005:334)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:334 advisory. MySQL is a multi-user, multi-threaded SQL database server. This update fixes several security risks in the MySQL server. Stefano Di Paola...

SUSE-SA:2005:019: mysql

The remote host is missing the patch for the advisory SUSE-SA:2005:019 mysql. MySQL is an Open Source database server, commonly used together with web services provided by PHP scripts or similar. This security update fixes a broken mysqlhotcopy script as well as several security related bugs: -...