MS11-083: Vulnerability in TCP/IP Could Allow Remote Code Execution (2588516)

The TCP/IP stack in use on the remote Windows host is affected by an integer overflow vulnerability. Sending a continuous flow of specially crafted UDP packets to a closed port can result in arbitrary code execution in kernel mode. C Tenable Network Security, Inc. include"compat.inc"; if...

Novell ZENworks Handheld Management Common.dll messageID Request Field Parsing Traversal Arbitrary File Creation

The version of the 'Common.dll' library included with the ZENworks Handheld Management install on the remote Windows host is affected by a directory traversal vulnerability because it fails to sanitize user input to the 'messageID' field in requests of directory traversal sequences. An...

Symantec IM Manager < 8.4.18 Multiple Vulnerabilities (SYM11-012)

The version of Symantec IM Manager running on the remote host is earlier than 8.4.18. Such versions are affected by the following vulnerabilities in the management console : - Multiple XSS. CVE-2011-0552 - An unspecified SQL injection. CVE-2011-0553 - An unspecified code injection. CVE-2011-0554 ...

Check Point SSL Network Extender ActiveX Control Remote Code Execution

The version of the Check Point SSL Network Extender ActiveX control installed on the remote Windows host reportedly contains a remote code execution vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage this issue to...

HP Easy Printer Care Software ActiveX Control Remote Code Execution Vulnerabilities

The version of the HPTicketMgr.dll ActiveX control, part of HP Easy Printer Care Software and installed on the remote Windows host, is affected by several vulnerabilities : - The 'SaveXML' method in the XMLSimpleAccessor class ActiveX control is prone to a directory traversal attack and can be...

Flash Player <= 10.3.181.36 Multiple Vulnerabilities (APSB11-21)

According to its version, the instance of Flash Player installed on the remote Windows host is 10.3.181.36 or earlier. As such, it is reportedly affected by several critical vulnerabilities : - Multiple buffer overflow vulnerabilities could lead to code execution. CVE-2011-2130, CVE-2011-2134,...

MS11-061: Vulnerability in Remote Desktop Web Access Could Allow Elevation of Privilege (2546250) (uncredentialed check)

The version of Remote Desktop Web Access running on the remote host has a reflected cross-site scripting vulnerability. Input to the 'ReturnUrl' parameter of login.aspx is not properly sanitized. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL,...

Trend Micro Control Manager CasLogDirectInsertHandler.cs Remote Code Execution

The Trend Micro Control Manager install on the remote Windows host is missing Critical Patch 1422. As such, the included CasLogDirectInsert.aspx http handler reportedly has a vulnerability by which malicious XML and schema information can be used in queries in the backend database. Using a...

HP iNode Management Center Remote Code Execution (HPSB3C02687)

The remote Windows host has an installation of HP iNode Management Center that is affected by a remote code execution vulnerability. An unauthenticated remote attacker can send a specially crafted packet that could result in a stack-based buffer overflow. A successful attack will allow running...

Adobe ColdFusion Multiple Vulnerabilities (APSB11-04) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by multiple vulnerabilities : - Multiple cross-site scripting vulnerabilities exist in the ColdFusion administrator console. CVE-2011-0580 - Multiple CRLF injection vulnerabilities in various tags allow adding headers...

IDrive Online Backup ActiveX Control < 3.4.1 Arbitrary File Overwrite

The version of IDrive installed on the remote Windows host is earlier than 3.4.1 and includes a third-party ActiveX control named UniBasicPack.UniTextBox from CyberActiveX with an insecure method. Specifically, the 'SaveToFile' method can be abused to overwrite arbitrary files. Note that this...

Microsoft System Center Configuration Manager Client Installed

The Microsoft System Center Configuration Manager client, a management system client, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid55532; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate",...

Opera < 11.50 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.50 and thus potentially affected by multiple vulnerabilities: - An error exists in the handling of data URIs that allows cross-site scripting in some unspecified cases. Issue 995 - An error exists in the browser's handli...

Citrix EdgeSight for Load Testing < 3.8.1 Remote Code Execution

According to its version number, the Citrix EdgeSight for Load Testing install on the remote Windows host is earlier than 3.8.1. As such, it is affected by a code execution vulnerability in the 'LauncherService.exe' component. C Tenable Network Security, Inc. include"compat.inc"; if description...

Citrix EdgeSight for Load Testing Detection

Citrix EdgeSight for Load Testing, a system and network monitoring application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55473; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"...

Foxit Reader < 4.0.0.0619 FreeType Engine RCE

The version of Foxit Reader installed on the remote Windows host is prior to 4.0.0.0619. It is, therefore, affected by a remote code execution vulnerability in the FreeType engine due to an integer overflow condition in the Type 1 font decoder. An attacker can exploit this, by tricking a user int...

Shockwave Player < 11.6.0.626 (APSB11-17)

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.6.0.626. Such versions are potentially affected by the following issues : - Multiple memory corruption vulnerabilities affect the 'Dirapi.dll' component that can result in arbitrary code execution...

Flash Player < 10.3.181.26 Multiple Vulnerabilities (APSB11-18)

According to its version, the instance of Flash Player installed on the remote Windows host is earlier than 10.3.181.26. This version of Flash Player has a critical vulnerability. By tricking a user on the affected system into opening a specially crafted document with Flash content, an attacker...

MS11-048: Vulnerability in SMB Server Could Allow Denial of Service (2536275)

A vulnerability in the SMB service on the remote Windows host can reportedly be abused by a remote, unauthenticated attacker to cause the host to stop responding until manually restarted. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55128; scriptversion"1.16";...

Symantec Backup Exec Server Unauthorized Access (SYM11-006)

According to its version number, the Symantec Backup Exec Server installed on the remote Windows host is affected by an unauthorized access vulnerability. By performing a man-in-the-middle attack, a remote, unauthenticated attacker could execute arbitrary code on the host subject to the privilege...