523 matches found
MySQL < 3.23.59 / 4.0.21 Multiple Vulnerabilities
The remote host is running a version of the MySQL database which is older than 4.0.21 or 3.23.59. MySQL is a database which runs on both Linux/BSD and Windows platform. The remote version of this software is vulnerable to specially crafted 'ALTER TABLE SQL' query which can be exploited to bypass...
Mozilla Firefox Error Reporting Version Check (deprecated)
Binary data 2285.prm...
JetRoot_pl.txt
!/usr/bin/perl use IO::Socket; This is an exploit for HP Web JetAdmin, the printer management server from HP. It is NOT about printers! The service usually runs on port 8000 on Windows, Solaris or Linux boxes. Greetz: The Phenoelit People, c-base crew, EEyE rock!, Halvar on the other side of the...
HP Web JetAdmin 6.5 - 'connectedNodes.ovpl' Remote Code Execution
!/usr/bin/perl use IO::Socket; This is an exploit for HP Web JetAdmin, the printer management server from HP. It is NOT about printers! The service usually runs on port 8000 on Windows, Solaris or Linux boxes. Greetz: The Phenoelit People, c-base crew, EEyE rock!, Halvar on the other side of the...
Apache 2.0.x < 2.0.49 mod_ssl Plain HTTP Request DoS
The remote host appears to be running a version of Apache 2.0.x prior to 2.0.49. It is, therefore, affected by a denial of service vulnerability in the 'modssl' module. An attacker can exploit this to deny service to the Apache server. C Tenable Network Security, Inc. include"compat.inc"; if...
Exim < 4.22 smtp_in.c HELO/EHLO Remote Overflow
According to its banner, the version of Exim running on the remote host has a remote heap-based buffer overflow vulnerability. A remote, unauthenticated attacker could potentially exploit this to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
ProFTPD 1.2.0rc2 Malformed cwd Command Format String
The remote ProFTPd server is as old or older than 1.2.0rc2 There is a very hard to exploit format string vulnerability in this version that could allow an attacker to execute arbitrary code on this host. The vulnerability is believed to be nearly impossible to exploit though. C Tenable Network...
Sendmail < 8.7.6 Multiple Local Vulnerabilities
The remote Sendmail server, according to its version number, has a buffer overflow and denial of service problem. Using a flaw in the GECOS field handling, it may allow a local user to gain root access. C Tenable Network Security, Inc. Original script by Xue Yong Zhi Changes by Tenable: - Revised...
Sendmail < 8.10.0 mail.local Newline Handling Remote DoS
mail.local in the remote Sendmail server, according to its version number, does not properly identify the .\n string which identifies the end of message text, which allows a remote attacker to cause a denial of service or corrupt mailboxes via a message line that is 2047 characters long and ends ...
mod_frontpage for Apache fpexec Remote Overflow
The remote host is using the Apache modfrontpage module. modfrontpage older than 1.6.1 is vulnerable to a buffer overflow that could allow an attacker to gain root access. Since Nessus was not able to remotely determine the version of modfrontage you are running, you are advised to manually check...
IRIX talkd vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: talkd vulnerability Number: 20020603-01-I Date: June 10, 2002 Reference: CVE-2000-1010 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the /usr/etc/talkd daemon contains a format...
MediaMail vulnerability
-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: MediaMail vulnerability Number: 20020602-01-I Date: June 6, 2002 Reference: CAN-2002-0358 - ----------------------- - --- Issue Specifics --- - ----------------------- It's been reported that the "MediaMail" and "MediaMail Pro" the...
OpenSSH < 3.0.1 Multiple Flaws
According to its banner, the remote host appears to be running OpenSSH version 3.0.1 or older. Such versions are reportedly affected by multiple flaws : - Provided KerberosV is enabled disabled by default, it may be possible for an attacker to partially authenticate. - It may be possible to crash...
cfingerd < 1.4.4 Multiple Vulnerabilities
The version of cfingerd running on the remote host has multiple vulnerabilities, including : - A local buffer overflow in the GECOS field, which can be used to escalate privileges. - A format string vulnerability, triggered by a malformed ident reply. This can be used to execute arbitrary code. -...
Cisco IOS 12 - Software '?/' HTTP Request Denial of Service
source: https://www.securityfocus.com/bid/1838/info Cisco devices running IOS software may be prone to a denial of service attack if a URL containing a question mark followed by a slash ?/ is requested. The device will enter an infinite loop when supplied with a URL containing a "?/" and an enabl...
INN < 2.2.3 verifycancels Option Cancel Request Message Overflow
The remote version of INN is between 2.0 and 2.2.2 There is a known security flaw in this version of INN which may allow an attacker to execute arbitrary code on this server is the option 'verifycancels' is enabled in inn.conf C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
Qualcomm qpopper 2.4 - POP Server Buffer Overflow (1)
Qualcomm qpopper 2.4 - POP Server Buffer Overflow 1 // source: https://www.securityfocus.com/bid/133/info A number of buffer-overflow issues reside in versions prior to 2.5 of Qualcomm's 'qpopper' program. Exploiting this issue allows a remote attacker to execute arbitrary commands on hosts that...
Driver Ceiling to Check for VB ceiling
Evaluates to true if client machine is running Win10 OS with build number less than 19042...