Cerb Detection

The remote web server hosts Cerb, a web-based business collaboration and automation tool. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65983; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Cerb...

Solaris 10 (x86) : 150118-01

SunOS 5.10x86: mac patch. Date this patch was last updated by Sun : Mar/22/13 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/09/23. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Adobe Acrobat Multiple Vulnerabilities -01 (Jan 2013) - Mac OS X

Adobe Acrobat is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat"; ifdescription...

Foxit Advanced PDF Editor Detection (Windows SMB Login)

Detects the installed version of Foxit Advanced PDF Editor. The script logs in via smb, searches for Foxit Advanced PDF Editor in the registry and gets the version from registry SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

AIX 6.1 TL 3 : qosmod (IZ71555)

There is a buffer overflow vulnerability in the qosmod command. A locally authenticated attacker can exploit this vulnerability if they have they have been assigned the aix.network.config.no role-based access control authorization. The successful exploitation of this vulnerability allows a local...

Solaris 10 (sparc) : 146232-21

SunOS 5.10: iSCSI patch. Date this patch was last updated by Sun : Oct/01/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2014/01/16. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Debian DSA-2564-1 : tinyproxy - denial of service

gpernot discovered that Tinyproxy, a HTTP proxy, is vulnerable to a denial of service by remote attackers by sending crafted request headers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Mutiny Detection

Detection of Mutiny. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Visual Studio Team Foundation / Azure DevOps Server Detection (Windows SMB Login)

SMB login-based detection of Microsoft Visual Studio Team Foundation / Azure DevOps Server. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 17 : firefox-15.0-1.fc17 / thunderbird-15.0-1.fc17 / thunderbird-lightning-1.7-2.fc17 / etc (2012-12871)

Update to 10.0.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

RHEL 6 : openldap (RHSA-2012:1151)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1151 advisory. - openldap: does not honor TLSCipherSuite settings CVE-2012-2668 Note that Nessus has not tested for this issue but has instead relied only on the...

Cobbler Detection (HTTP)

HTTP based detection of Cobbler. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/...

Symantec pcAnywhere Access Server Remote Detection

Detection of Symantec pcAnywhere Access Server. The script sends a connection request to the server and attempts to extract the response. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cisco Scientific Atlanta D20 and D30 Based Cable Modem Cross-Site Scripting Vulnerability

Cisco Scientific Atlanta cable modems D20 and D30 based products contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient sanitization of user-supplied input to the web wizard setup web page. An...

Solaris 10 (sparc) : 149191-01 (deprecated)

SunOS 5.10: mountd patch. Date this patch was last updated by Sun : Jun/08/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/11/29. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Liferay Portal Detection

Liferay Portal, a Java web portal, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59228; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Liferay Portal Detection";...

Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

LuraWave JP2 ActiveX Control < 2.1.5.11 jp2_x.dll Remote Buffer Overflow

The version of the LuraWave JP2 ActiveX control installed on the remote Windows host reportedly contains a stack-based buffer overflow vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage this issue to execute arbitrar...

Scientific Toolworks Understand 'wintab32.dll' DLL Loading Arbitrary Code Execution

The version of Scientific Toolworks Understand installed on the remote Windows host is earlier than 2.6 Build 600. As such, it insecurely looks in its current working directory when resolving DLL dependencies, such as for 'wintab32.dll'. Attackers may exploit this issue by placing a specially...

Solaris 10 (x86) : 146667-04

SunOS 5.10x86: lp patch. Date this patch was last updated by Sun : Feb/03/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/02/25. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...