FlexCast Server Detection

The remote host is running FlexCast, an audio/video streaming server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18428; scriptversion"1.10"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"FlexCast Server Detection"; scriptsetattributeattribute:"synopsis",...

PeerCast Detection

The remote host is running PeerCast, a peer-to-peer software package that lets users broadcast streaming media. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18418; scriptversion"1.11"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"PeerCast Detection";...

Kerio Winroute Firewall Admin Service Detection

The remote host appears to be running Kerio Winroute Firewall Admin service. It is recommended to block incoming traffic to this port. Also, make sure the use of this software matches your corporate security policy. Copyright C 2005 Secure Computer Group. University of A Coruna This script was...

ICUII Detection

ICUII is installed on the remote host. ICUII is a video chat package for Windows that supports both 'family-oriented' and 'adult' themes. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18174; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate",...

Kerio Personal Firewall Admin Service Detection

The remote host appears to be running the Kerio Personal Firewall Admin service on this port. It is recommended that this port is not reachable from the outside. Also, make sure that the use of this software is done in accordance with your corporate security policy. Copyright C 2005 Secure Comput...

Hydrogen Detection

The remote host seems to be running Hydrogen, a backdoor used by penetration testers to gather screen shots, download files or gain control of the remote host. Make sure that the use of this software on the remote host is done in accordance with your security policy. %NASLMINLEVEL 70300 C Tenable...

CVE-2005-0149

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages...

CVE-2003-1063

The patches 1 105693-13, 2 108800-02, 3 105694-13, and 4 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy...

Microsoft Windows SMB : Suspicious Software Detection

This plugin checks for the presence of files and programs which might have been installed without user consent. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid16314; scriptversion"$Revision: 1.22 $"; scriptcvsdate"$Date: 2015/10/21 20:34:21 $";...

Timbuktu Detection (TCP)

The remote service is the TCP contact port for Timbuktu, a remote control software application for Windows and Mac OS X. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid15891; scriptversion"1.18";...

MailCarrier 2.51 SMTP server Buffer Overflow [PoC included]

ABOUT : MailCarrier is a full-featured mail server with the latest security and anti-spam functions. It supports SSL communication and SMTP/POP3 authentication methods based on SASL and NTLM that do not transmit message and/or password in clear text. Many spam mails can be blocked through inquiry...

Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass

Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass source: https://www.securityfocus.com/bid/11447/info Microsoft Outlook Express is reported prone to a security policy bypass vulnerability. The vulnerability presents itself if an attached image file is referenced using ...

Microsoft Outlook 2003 - Security Policy Bypass

Microsoft Outlook 2003 - Security Policy Bypass source: https://www.securityfocus.com/bid/11446/info Microsoft Outlook 2003 is reported prone to a security policy bypass vulnerability. It is reported that by including a base64 encoded image in an email and labeling that image in a sufficient...

Microsoft Outlook Express 4.x/5.x/6.0 - Plaintext Email Security Policy Bypass

source: https://www.securityfocus.com/bid/11447/info Microsoft Outlook Express is reported prone to a security policy bypass vulnerability. The vulnerability presents itself if an attached image file is referenced using a specially crafted CID URI. This will result in a policy bypass because the...

H323 Protocol / VoIP Application Detection

H323 is a protocol used all over the Internet. It is used for Voice Over IP VoIP, Microsoft NetMeeting, and countless other applications. Nessus was able to determine that the remote device supports the H323 protocol. Make sure the use of this program is done in accordance with your corporate...

POWER SEARCH Detection

The remote host is using the POWER SEARCH program. You should ensure that : - the user intended to install POWER SEARCH it is sometimes silently installed - the use of POWER SEARCH matches your corporate mandates and security policies. To remove this sort of software, you may wish to check out...

IPINSIGHT Detection

The remote host is using the IPINSIGHT program. You should ensure that the user intended to install IPINSIGHT as it is sometimes silently installed. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12015; scriptversion"1.16";...

AUREATE Software Detection

The remote host is using the AUREATE program. You should ensure that: - the user intended to install AUREATE it is sometimes silently installed - the use of AUREATE matches your corporate mandates and security policies. C Tenable Network Security, Inc. include"compat.inc"; if description...

Yahoo Messenger Detection

Yahoo Messenger is running on this machine and listening on this port. It allows a user to chat and share files with remote entities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11993; scriptversion"$Revision: 1.12 $"; scriptcvsdate"$Date: 2012/02/17 13:05:00 $";...

TOCTOU with NT System Service Hooking

TOCTOU Time-Of-Check-to-Time-Of-Use problem is known for a while 1. Nevertheless such bugs are still not uncommon. That is more or less acceptable for general software but not for security products. I believe there are drivers that hook kernel system services by well known technique 2,3,4. Those...