RIS Installation Check

This plugin checks if the equipment was installed via RIS. OpenVAS Vulnerability Test $Id: risdetect.nasl 6056 2017-05-02 09:02:50Z teissa $ Description: RIS Installation Check Authors: Jeff Adams Copyright: Copyright C 2004 Jorge Pinto And Nelson Gomes This program is free software; you can...

Oracle 9iAS Dynamic Monitoring Services

In a default installation of Oracle 9iAS, it is possible to access the Dynamic Monitoring Services pages anonymously. Access to these pages should be restricted. OpenVAS Vulnerability Test $Id: oracle9iapachedms.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Oracle 9iAS Dynamic Monitoring...

Detect talkd server port and protocol version

The remote host is running a 'talkd' daemon. talkd is the server that notifies a user that someone else wants to initiate a conversation with him. OpenVAS Vulnerability Test $Id: ntalkdetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Detect talkd server port and protocol version Authors...

alya.cgi

alya.cgi is a cgi backdoor distributed with multiple rootkits. OpenVAS Vulnerability Test $Id: alya.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: alya.cgi Authors: Jason Lidow Copyright: Copyright C 2002 Jason Lidow This program is free software; you can redistribute it and/or modify it...

spank.c

Your machine answers to TCP packets that are coming from a multicast address. This is known as the 'spank' denial of service attack. OpenVAS Vulnerability Test $Id: spank.nasl 8145 2017-12-15 13:31:58Z cfischer $ spank.c Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This program ...

Kerio Mailserver Admin Service

The administrative interface of a mail server is listening on this port. Description : The remote host appears to be running the Kerio Admin MailServer Admin Service on this port. OpenVAS Vulnerability Test $Id: keriomailserveradminport.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Kerio...

TheServer clear text password

We were able to read the server.ini file It may contain sensitive information like clear text passwords. This flaw is known to affect TheServer. OpenVAS Vulnerability Test $Id: theservercleartext.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: TheServer clear text password Authors: Michel...

JRun directory traversal

This host is running the Allaire JRun web server. Versions 2.3.3, 3.0, and 3.1 are vulnerable to a directory traversal attack. This allows a potential intruder to view the contents of any file on the system. OpenVAS Vulnerability Test $Id: DDIJRunTraversal.nasl 6046 2017-04-28 09:02:54Z teissa $...

IPSEC IKE check

The remote IPSEC server seems to have a problem negotiating bogus IKE requests. An attacker may use this flaw to disable your VPN remotely. OpenVAS Vulnerability Test $Id: ikecheck.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IPSEC IKE check Authors: John Lampe Script audit and...

Misc information on News server

This script detects if the NNTP server is open to outside, counts the number of groups, and tries to post outside. This channel may been used by virus or trojan. OpenVAS Vulnerability Test $Id: nntpinfo.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Misc information on News server Authors:...

PunBB URL Quote Tag XSS

The remote web server contains a PHP application that is prone to cross-site scripting attacks. Description : According to its banner, the remote version of PunBB is vulnerable to cross-site scripting flaws because the application does not validate URL and quote tags. With a specially-crafted URL...

Check for bdir.htr files

The file bdir.htr is a default IIS files which can give a malicious user a lot of unnecessary information about your file system. Specifically, the bdir.htr script allows the user to browse and create files on hard drive. As this includes critical system files, it is highly possible that the...

Intrusion.com SecureNet sensor detection

The remote host appears to be an Intrusion.com SecureNet sensor on this port. OpenVAS Vulnerability Test $Id: securenetsensordetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Intrusion.com SecureNet sensor detection Authors: David Maciejak Copyright: Copyright C 2005 David Maciejak This...

Chora Detection

This script detects whether the remote host is running Chora and extracts version numbers and locations of any instances found. Chora is a PHP-based interface to CVS repositories from the Horde Project. See http://www.horde.org/chora/ for more information. OpenVAS Vulnerability Test $Id:...

Mail relaying (thorough test)

The remote SMTP server appears to be insufficiently protected against relaying This means that spammers might be able to use your mail server to send their mails to the world. OpenVAS Vulnerability Test $Id: smtprelay2.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Mail relaying thorough te...

Macromedia ColdFusion MX Path Disclosure Vulnerability

A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests port 8500 are received by the server, an error message is returned containing the full path of the ColdFusion installation. OpenVAS...

Easy Message Board Command Execution

The remote host is running Easy Message Board, a bulletin board system written in perl. The remote version of this script contains an input validation flaw which may be used by an attacker to perform a directory traversal attack or execute arbitrary commands on the remote host with the privileges...

DB4Web directory traversal

It is possible to read any file on your system through the DB4Web software. OpenVAS Vulnerability Test $Id: db4webdirtrav.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: DB4Web directory traversal Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free software; y...

myServer POST Denial of Service

The remote host is running myServer, an open-source http server. This version is vulnerable to remote denial of service attack. With a specially crafted HTTP POST request, an attacker can cause the service to stop responding. OpenVAS Vulnerability Test $Id: myserverpostdos.nasl 8023 2017-12-07...

Webserver4everyone too long URL

It may be possible to make Webserver4everyone execute arbitrary code by sending it a too long url with the Host: field set to 127.0.0.1 OpenVAS Vulnerability Test $Id: ws4etoolongurl.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Webserver4everyone too long URL Authors: Michel Arboi...