Solaris 10 (sparc) : 146232-21

SunOS 5.10: iSCSI patch. Date this patch was last updated by Sun : Oct/01/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2014/01/16. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Debian DSA-2564-1 : tinyproxy - denial of service

gpernot discovered that Tinyproxy, a HTTP proxy, is vulnerable to a denial of service by remote attackers by sending crafted request headers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Mutiny Detection

Detection of Mutiny. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Visual Studio Team Foundation / Azure DevOps Server Detection (Windows SMB Login)

SMB login-based detection of Microsoft Visual Studio Team Foundation / Azure DevOps Server. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Fedora 17 : firefox-15.0-1.fc17 / thunderbird-15.0-1.fc17 / thunderbird-lightning-1.7-2.fc17 / etc (2012-12871)

Update to 10.0.7 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

RHEL 6 : openldap (RHSA-2012:1151)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1151 advisory. - openldap: does not honor TLSCipherSuite settings CVE-2012-2668 Note that Nessus has not tested for this issue but has instead relied only on the...

Cobbler Detection (HTTP)

HTTP based detection of Cobbler. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/...

Symantec pcAnywhere Access Server Remote Detection

Detection of Symantec pcAnywhere Access Server. The script sends a connection request to the server and attempts to extract the response. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cisco Scientific Atlanta D20 and D30 Based Cable Modem Cross-Site Scripting Vulnerability

Cisco Scientific Atlanta cable modems D20 and D30 based products contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability is due to insufficient sanitization of user-supplied input to the web wizard setup web page. An...

Solaris 10 (sparc) : 149191-01 (deprecated)

SunOS 5.10: mountd patch. Date this patch was last updated by Sun : Jun/08/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/11/29. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Liferay Portal Detection

Liferay Portal, a Java web portal, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59228; scriptversion"1.8"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Liferay Portal Detection";...

Apple Safari Webkit Multiple Vulnerabilities (Mar 2012) - Windows

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

LuraWave JP2 ActiveX Control < 2.1.5.11 jp2_x.dll Remote Buffer Overflow

The version of the LuraWave JP2 ActiveX control installed on the remote Windows host reportedly contains a stack-based buffer overflow vulnerability. If an attacker can trick a user on the affected host into viewing a specially crafted HTML document, he can leverage this issue to execute arbitrar...

Scientific Toolworks Understand 'wintab32.dll' DLL Loading Arbitrary Code Execution

The version of Scientific Toolworks Understand installed on the remote Windows host is earlier than 2.6 Build 600. As such, it insecurely looks in its current working directory when resolving DLL dependencies, such as for 'wintab32.dll'. Attackers may exploit this issue by placing a specially...

Solaris 10 (x86) : 146667-04

SunOS 5.10x86: lp patch. Date this patch was last updated by Sun : Feb/03/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/02/25. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

phpLDAPadmin 'server_id' Parameter Multiple XSS Vulnerabilities - Active Check

phpLDAPadmin is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Debian DSA-2393-1 : bip - buffer overflow

Julien Tinnes reported a buffer overflow in the Bip multiuser IRC proxy which may allow arbitrary code execution by remote users. The oldstable distribution lenny is not affected by this problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Oracle VirtualBox Detection (Mac OS X SSH Login)

Detects the installed version of Oracle VM VirtualBox. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

IBM WebSphere Application Server (WAS) Multiple Vulnerabilities - (Jan2012)

The host is running IBM WebSphere Application Server and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmwasmultvulnjan12.nasl 5977 2017-04-19 09:02:22Z teissa $ IBM WebSphere Application Server WAS Multiple Vulnerabilities - Jan2012 Authors: Antu Sanadi Copyright:...

Debian DSA-2354-1 : cups - several vulnerabilities

Petr Sklenar and Tomas Hoger discovered that missing input sanitising in the GIF decoder inside the CUPS printing system could lead to denial of service or potentially arbitrary code execution through crafted GIF files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...