Web Server SSL Port HTTP Traffic Detection

Nessus has discovered that it is talking in plain HTTP on an SSL port. Nessus has corrected this issue by enabling HTTPS for this port only. However, if other SSL ports are used on the remote host, they might be skipped. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

GLSA-200410-31 : Archive::Zip: Virus detection evasion

The remote host is affected by the vulnerability described in GLSA-200410-31 Archive::Zip: Virus detection evasion Archive::Zip can be used by email scanning software like amavisd-new to uncompress attachments before virus scanning. By modifying the uncompressed size of archived files in the glob...

solaris/SPARC connect-back 204 bytes

Exploit for solaris/sparc platform in category shellcode ==================================== solaris/SPARC connect-back 204 bytes ==================================== / Solaris shellcode - connects /bin/sh to a host Claes M. Nyberg 20020624 , / include / void mainvoid asm" ! Create socket mov 0x...

solaris/SPARC connect-back 204 bytes

solaris/SPARC connect-back 204 bytes. Shellcode exploit for solarissparc platform / Solaris shellcode - connects /bin/sh to a host Claes M. Nyberg 20020624 , / include / void mainvoid asm" ! Create socket mov 0x2, %o0 ! o0 = AFINET mov 0x2, %o1 ! o1 = SOCKSTREAM xor %o2, %o2, %o2 ! o2 = 0 mov 0xe...

Canon ImageRUNNER SMTP Arbitrary Content Printing

The remote host seems to be a Canon ImageRUNNER printer, which runs a SMTP service. It is possible to send an email to the SMTP service and have it printed out. An attacker may use this flaw to send an endless stream of emails to the remote device and cause a denial of service by using all of the...

Xedus Detection

The remote host runs Xedus Peer-to-Peer web server. It provides the ability to share files, music, and any other media, as well as create robust and dynamic websites, which can feature database access and file system access, with full .NET support. C Tenable Network Security, Inc...

GLSA-200401-02 : Honeyd remote detection vulnerability via a probe packet

The remote host is affected by the vulnerability described in GLSA-200401-02 Honeyd remote detection vulnerability via a probe packet A bug in handling NMAP fingerprints caused Honeyd to reply to TCP packets with both the SYN and RST flags set. Watching for replies, it is possible to detect IP...

GLSA-200408-21 : Cacti: SQL injection vulnerability

The remote host is affected by the vulnerability described in GLSA-200408-21 Cacti: SQL injection vulnerability Cacti is vulnerable to a SQL injection attack where an attacker may inject SQL into the Username field. Impact : An attacker could compromise the Cacti service and potentially execute...

GLSA-200407-06 : libpng: Buffer overflow on row buffers

The remote host is affected by the vulnerability described in GLSA-200407-06 libpng: Buffer overflow on row buffers Due to a wrong calculation of loop offset values, libpng contains a buffer overflow vulnerability on the row buffers. This vulnerability was initially patched in January 2003 but...

GLSA-200408-02 : Courier: XSS vulnerability in SqWebMail

The remote host is affected by the vulnerability described in GLSA-200408-02 Courier: XSS vulnerability in SqWebMail Luca Legato found that SqWebMail is vulnerable to a cross-site scripting XSS attack. An XSS attack allows an attacker to insert malicious code into a web-based application. SqWebMa...

SNMP Trap Agent on Remote Host

Binary data 1429.prm...

SNMP Agent on Remote Host

Binary data 1427.prm...

SNMP Trap Agent on Remote Host

Binary data 1428.prm...

SNMP Agent on Remote Host

Binary data 1426.prm...

Terminal Services Web Detection

Binary data 2508.prm...

Google Chrome < 1.0.154.59 Same Origin Policy Bypass Vulnerability

Binary data 5004.pasl...

SUSE-SA:2004:026: rsync

The remote host is missing the patch for the advisory SUSE-SA:2004:026 rsync. The rsync-team released an advisory about a security problem in rsync. If rsync is running in daemon-mode and without a chroot environment it is possible for a remote attacker to trick rsyncd into creating an absolute...

Mandrake Linux Security Advisory : squid (MDKSA-2001:088)

Vladimir Ivaschenko found a problem in the squid proxy server. Certain FTP requests could cause the squid daemon to abort, making it unavailable for a few seconds. If enough of these requests are sent in a short period of time, the squid daemon will not restart itself. %NASLMINLEVEL 70300 C Tenab...

Mandrake Linux Security Advisory : kdelibs (MDKSA-2001:046-3)

A problem exists with the kdesu component of kdelibs. It created a world-readable temporary file to exchange authentication information and delete it shortly after. This can be abused by a local user to gain access to the X server and could result in a compromise of the account that kdesu would...

Microsoft Windows Installed Hotfixes

Using the supplied credentials, Nessus was unable to log into the remote Windows host, enumerate installed hotfixes, or store them in its knowledge base for other plugins to use. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if...