Microsoft Windows - Local Users Information : Passwords Never Expire

Using the supplied credentials, Nessus was able to list local users that are enabled and whose passwords never expire. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10916; scriptversion"1.23"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft...

Microsoft Windows - Local Users Information : Never Changed Passwords

Using the supplied credentials, Nessus was able to list local users who have never changed their passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10914; scriptversion"1.22"; scriptcvsdate"Date: 2019/07/08 10:52:29"; scriptnameenglish:"Microsoft Windows - Loc...

Microsoft Windows Domain User Information

Using the supplied credentials, Nessus was able to retrieve information for each domain user. Note that this plugin itself does not issue a report and only serves to store information about each domain user in the KB for further checks. C Tenable Network Security, Inc. include"compat.inc"; if...

Microsoft Windows - Users Information : User Has Never Logged In

Using the supplied credentials, Nessus was able to list users who have never logged into their accounts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10899; scriptversion"1.20"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users...

Microsoft Windows - Users Information : Automatically Disabled Accounts

Using the supplied credentials, Nessus was able to list user accounts that have been automatically disabled. These accounts may have been disabled for security reasons or due to brute-force attack attempts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10895;...

Microsoft Windows 'Server Operators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Server Operators' group. Members of this group can perform most common administrative tasks. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10903; scriptversion"1.19"; scriptcvsdate"Dat...

Microsoft Windows 'Account Operators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Account Operators' group. Members of this group can create or modify local user accounts but can not modify or create administrative accounts or edit user rights. C Tenable Network Security, Inc. include"compat.inc"...

Microsoft Windows 'Administrators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Administrators' group. Members of this group have complete access to the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10902; scriptversion"1.23"; scriptcvsdate"Date:...

Microsoft Windows 'Print Operators' Group User List

Using the supplied credentials, it is possible to extract the member list of the 'Print Operators' group. Members of this group can manage printers within a Windows Domain or shutdown a server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10905; scriptversion"1.20"...

Microsoft Windows - Users Information : Can't Change Password

Using the supplied credentials, Nessus was able to list users who can not change their own passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10896; scriptversion"1.20"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users...

Microsoft Windows Guest Account Belongs to a Group

Using the supplied credentials, Nessus was able to determine that the 'Guest' user belongs to groups other than 'Guests' RID 546 or 'Domain Guests' RID 514. Guest users should not have any additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10907;...

Microsoft Windows - Users Information : Never Changed Password

Using the supplied credentials, Nessus was able to list users who have never changed their passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10898; scriptversion"1.23"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users...

Microsoft Windows - Users Information : Passwords Never Expire

Using the supplied credentials, Nessus was able to list users that are enabled and whose passwords never expire. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10900; scriptversion"1.22"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows ...

Weak authentication in iBill's Password Management CGI

Vulnerable Program: ibillpm.pl Perl CGI script Distributed by: iBill Internet Billing Company, http://www.ibill.com Problem: iBill hard codes a weak password for the user management script, ibillpm.pl, installed for clients that use the Password Management system. The weak password is the client'...

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link

Merit AAA RADIUS Server 3.8 - rlmadmin Symbolic Link source: https://www.securityfocus.com/bid/3302/info The 'rlmadmin' user management utility included with the Merit AAA RADIUS Server package is susceptible to a trivial symbolic link attack. The program allows users to specify a directory from...

SMB Use Domain SID to Enumerate Users

Using the domain security identifier SID, Nessus was able to enumerate the domain users on the remote Windows system. C Tenable Network Security, Inc. @PREFERENCES@ include"compat.inc"; if description scriptid10399; scriptversion"1.82"; scriptcvsdate"Date: 2020/01/07"; scriptnameenglish:"SMB Use...

Panda Security 3.0 - Multiple Vulnerabilities

Panda Security 3.0 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/1119/info Panda Security is a user management application for Windows 9x. With it, certain functions can be prohibited for specific users. One of the restrictive policies possible is to disable registry editin...

Panda Security 3.0 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/1119/info Panda Security is a user management application for Windows 9x. With it, certain functions can be prohibited for specific users. One of the restrictive policies possible is to disable registry editing. However, even with this feature activated,...