SUN virtual java machine DoS

Invalid fonts handling can crash virtual machine under Windows...

Multiple bugs in Sun-One on Windows

JSP source code disclosure, crossite scripting, weak encryption...

MS04-011: Microsoft Hotfix (credentialed check) (835732)

The remote host is missing a critical Microsoft Windows Security Update 835732. This update fixes various flaws that could allow an attacker to execute arbitrary code on the remote host. A series of worms Sasser are known to exploit this vulnerability in the wild. C Tenable Network Security, Inc...

eudora603.pl

Eudora 6.0.3 for Windows was released recently. Though known for years, the spoofing of attachments is still not fixed; the problem with LaunchProtect is not fixed either. Spoofing demo essentially identical to 6.0.1 version below. Cheers, Paul Szabo - [email protected]...

BargainBuddy Software Detection

BargainBuddy is installed on the remote host. This is an adware program that monitors web searches and displays advertisements based on the search terms. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12010; scriptversion"1.17";...

MapQuest Toolbar Detection

The remote host is using the MapQuest Toolbar program. You should ensure that the user intended to install this software. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12016; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate",...

Microsoft Windows XP2000 - showHelp .CHM File Execution (MS03-004)

Microsoft Windows XP2000 - showHelp .CHM File Execution MS03-004 source: https://www.securityfocus.com/bid/9320/info Microsoft Windows is prone to a security flaw in the implementation of the showHelp function. Microsoft previously released patches that provide security measures to prevent abuse ...

Microsoft Windows - ListBoxComboBox Control Local (MS03-045)

Microsoft Windows - ListBoxComboBox Control Local MS03-045 / \ local ListBox/ComboBox exploit for Win32 / \ Created by xCrZx crazyeinstein yahoo com /11.11.03/ / \ Usage: MS03-045.exe -r return address / \ there is two targets: CBDIR for ComboBox, LBDIR for ListBox. / \ As to return address it...

Microsoft Windows SMB Registry : SNMP Registry Key Permission Weakness Local Privilege Escalation

The registry key HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parameters can be modified by users who are not in the admin group. Write access to this key allows an unprivileged user to gain additional privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11868;...

The Analysis of RPC Long Filename Heap Overflow AND a Way to Write Universal Heap Overflow of Windows

The Analysis of RPC Long Filename Heap Overflow AND a Way to Write Universal Heap Overflow of Windows AuthorFLASHSKY SITEWWW.XFOCUS.NETWWW.VENUSTECH.COM.CN WWW.SHOPSKY.COM [email protected] Venus Active Defence Research Center Thanks [email protected],[email protected] Colleagues of...

Microsoft Windows shlwapi.dll Malformed HTML Tag Handling Null Pointer DoS

The remote host is running a version of the shlwapi.dll which crashes when processing a malformed HTML form. An attacker may use this flaw to prevent the users of this host from working properly. To exploit this flaw, an attacker would need to send a malformed HTML file to the remote user, either...

Microsoft Windows Administrator Default Password Detection (W32/Deloder Worm Susceptibility)

W32/Deloder is a worm that tries to connect to a remote share by using a list of built-in administrator passwords. Nessus was able to connect to this host with one of these credentials. The worm W32/Deloder may use it to break into the remote host and upload infected data in the remote shares. C...

CVE-2002-1848

TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords...

CVE-2002-1860

Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1861

Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

CVE-2002-1875

Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent password, which could allow the administrators to log on as the enterceptagent account and conceal their identity...

CVE-2002-1856

HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot "WEB-INF."...

MS02-054: Unchecked Buffer in File Decompression Functions Could Lead to Code Execution (329048)

The remote host contains a version of Windows that has a security flaw in the compressed files ZIP implementation. An attacker can exploit this flaw by sending a malicious zip file to the remote user. When the user opens the file with Explorer, arbitrary code will be executed. C Tenable Network...

Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (1)

// source: https://www.securityfocus.com/bid/5408/info A serious design error in the Win32 API has been reported. The issue is related to the inter-window message passing system. This vulnerability is wide-ranging and likely affects almost every Win32 window-based application. Attackers with loca...

Working Resources 1.7.3 BadBlue - Null Byte File Disclosure

Working Resources 1.7.3 BadBlue - Null Byte File Disclosure source: https://www.securityfocus.com/bid/5226/info BadBlue is a P2P file sharing application distributed by Working Resources. It is available for Microsoft Windows operating systems. It has been discovered that a request passed to a...