WebCalendar long.php user_inc Parameter Traversal Arbitrary File Access

The remote installation of WebCalendar may allow an attacker to read arbitrary files on the remote host by supplying a filename to the 'userinc' argument of the file 'long.php'. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Moderate: Red Hat Security Advisory: : Updated Ethereal packages fix security issues

Updated Ethereal packages available to fix a number of remotely exploitable security issues Ethereal is a program for monitoring network traffic. A number of security issues affect Ethereal. By exploiting these issues it may be possible to make Ethereal crash or run arbitrary code by injecting a...

Carello E-Commerce Carello.dll Command Execution

The remote host appears to be running Carello.dll, a web-based shopping cart. Versions up to 1.3 of this web shopping cart have a command execution vulnerability. This could allow a remote attacker to run arbitrary commands on the system with the privileges of the web server. Note that no attack...

Mailreader 2.3.30 - 2.3.31 Multiple Vulnerabilities

Mailreader.com software is installed. A directory traversal flaw allows anybody to read arbitrary files on your system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: Date: Mon, 28 Oct 2002 17:48:04 +0800 From: "pokleyzz" To: "bugtraq" , "Shaharil Abdul Malek" , "sk" , "pokley" ...

MyServer <= 0.4.2 Multiple Remote DoS

The remote host is running MyServer 0.4.2 or older. There are flaws in this software that could allow an attacker to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11770; scriptversion "1.25"; scriptbugtraqid7917, 8120;...

PostNuke Glossary Module page Parameter SQL Injection

The remote host is running a version of PostNuke which is vulnerable to a SQL injection attack. An attacker may use this flaw to gain the control of the database of this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Vignette StoryServer < 6.0.4 Arbitrary TCL Code Execution

The remote host is running Vignette StoryServer v6, a web interface to Vignette's Content Management suite. A flaw in this product may allow an attacker to inject arbitrary code in this server. Nessus could not determine the existence of this vulnerability so this might be a false positive...

pMachine lib.inc.php pm_path Parameter Remote File Inclusion

It is possible to make the remote host include PHP files hosted on a third-party server using the pmachine CGI suite which is installed. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable...

gnocatan Multiple Buffer Overflows

The remote host is running gnocatan, an online game server. There is a flaw in this version which may allow an attacker to execute arbitrary commands on this host, with the privileges this service is running with. An attacker may exploit this flaw to gain a shell on this host. C Tenable Network...

FTP Service 1.2 - Multiple Vulnerabilities

FTP Service 1.2 - Multiple Vulnerabilities FTP Service Multiple Vulnerabilities Vendor: Pablo Software Solutions Product: FTP Service Version: = 1.2 Website: http://www.pablovandermeer.nl/ftpservice.html BID: 7799 7801 Description: FTPService.exe is a service-version of Pablo's FTP Server. This...

P-Synch Password Management Multiple Vulnerabilities

The remote web server is running P-Synch, a password management system running over HTTP. There is a flaw in the CGIs nph-psa.exe and nph-psf.exe which may allow an attacker to make this host include remote files, disclose the path to the p-synch installation or produce arbitrary HTML code...

Zeus Admin vs_diag.cgi XSS

The remote host is running the Zeus WebServer. There is a vulnerability in the CGI 'vsdiag.cgi' that may allow an attacker to gain administrative access on that server. To exploit this flaw, the attacker would need to lure the administrator of this server to click on a rogue link. %NASLMINLEVEL...

Apache 2.0.x < 2.0.46 Multiple DoS

The remote host appears to be running a version of Apache 2.0.x that is prior to 2.0.46. It is, therefore, affected by multiple denial of service vulnerabilities : - There is a denial of service vulnerability that may allow an attacker to disable basic authentication on this host. - There is a...

webERP Configuration File Remote Access

The remote host is using webERP, a web-based accounting / ERP software. There is a flaw in the version of webERP on the remote host such that an attacker is able to download the application's configuration file, 'logicworks.ini', containing the database username and password. %NASLMINLEVEL 70300 ...

snitz_exec.txt

Overview: Snitz Forums 2000, one of the best ASP based bulletin board systems on the market. Getting better every day! A complete board system forum that allows the user access to a friendly and intuitive interface. http://forum.snitz.com Problem Description: Snitz Forums 3.3.03 has an SQL...

Dr.Web File Name Handling Overflow

The remote host is running Dr.Web - an antivirus program. There is a flaw in the remote version of Dr.Web which may make it crash when scanning files whose name is excessively long. An attacker may use this flaw to execute arbitrary code on this host. To exploit it, an attacker would need to send...

Ethereal contains integer overflow in Mount dissector

Overview Ethereal is a network traffic analysis package. The mount packet dissector contains a vulnerability that may result in the execution of arbitrary code. Description The mount packet dissector for Ethereal contains an integer overflow vulnerability. According to the Ethereal Advisory,...

Novell NetWare FTPServ Malformed Input Remote DoS

The installed version of Novell FTPServ does not handle certain types of input properly. An attacker can exploit this flaw to crash the FTP service. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11614; scriptversion"1.20"; scriptbugtraqid7072; scriptnameenglish:"Nove...

mod_survey For Apache ENV Tags SQL Injection

According to the banner, the remote host is using a vulnerable version of modsurvey, a Perl module for managing online surveys. This version has a flaw that could result in a SQL injection attack when the module is being used with a database backend. A remote attacker could exploit this to take...

Mac OS X Directory Service Connection Saturation Remote DoS

It was possible to disable the remote service probably MacOS X's directory service by making multiple connections to this port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11603; scriptversion"1.20"; scriptcvsdate"Date: 2018/11/15 20:50:21"; scriptbugtraqid7323;...