FreeBSD : rsync path traversal issue (168)

The following package needs to be updated: rsync %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg73ea07069c5711d893660020ed76ef5a.nasl. Disabled on 2011/10/01. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

FreeBSD : GNU libtool insecure temporary file handling (95)

The following package needs to be updated: libtool %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgcacaffbc5e6411d880e30020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

Web Application Default Username ('super'/'1502') / Password ('super'/'1502') - deprecated

This plugin has been deprecated due to age and the likelihood of false positives. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/10/26. Deprecated Due to Age and likelihood of false positives. include"compat.inc"; if description scriptid12203; scriptversion"1.26";...

Web Server Incomplete Basic Authentication DoS (deprecated)

This plugin is no longer relevant, and may never have worked correctly. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/09/13. Deprecated by RES-74695. include"compat.inc"; ifdescription scriptid12200; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

Norton AntiVirus Detection and Status (deprecated)

This plugin has been deprecated. It has been replaced by Symantec Antivirus Software Detection and Status, ID 21725. %NASLMINLEVEL 999999 This script has been rewritten by Tenable Network Security Original script was written by Jeff Adams ; @DEPRECATED@ Disabled on 2017/04/24. Deprecated by...

PayPal Store Front index.php page Parameter Remote File Inclusion (deprecated)

It is possible to make the remote host include PHP files hosted on a third-party server using the PayPal Store Front CGI suite which is installed. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. The plugin was...

Avirt Multiple Product HTTP Proxy Overflow (deprecated)

This plugin has been deprecated as it resulted in false positives without reliably detecting the vulnerability on the intended target. Avirt software is not currently being distributed or maintained. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/03/30. include"compat.inc";...

AN HTTPd count.pl Traversal Arbitrary File Overwrite (deprecated)

The remote web server is running a CGI called 'count.pl' which is affected by an directory traversal vulnerability. An attacker could exploit this in order to overwrite any existing file on the remote server, with the privileges of the httpd server. This plugin has been deprecated as it resulted ...

Virus Infection Detection (deprecated)

This script checks for the presence of different viruses on the remote host, by using the SMB credentials that you provide to Nessus. - W32/Badtrans-B - JSGIGGER.A@mm - W32/Vote-A - W32/Vote-B - CodeRed - W32.Sircam.Worm@mm - W32.HLLW.Fizzer@mm - W32.Sobig.B@mm - W32.Sobig.E@mm - W32.Sobig.F@mm -...

Alcatel OmniSwitch 7700/7800 Switches Backdoor Access (deprecated)

This plugin has been deprecated due to excessive false positives since it flags any telnet banner discovered on TCP 6778. %NASLMINLEVEL 999999 This script was written by deepquest See the Nessus Scripts License for details Modifications by rd: - added ref:...

HTTP Reverse Proxy Detection (Deprecated)

This web server is reachable through a reverse HTTP proxy. Note: This plugin has been deprecated. @DEPRECATED@ C Tenable Network Security, Inc. HTTP/1.1 is defined by RFC 2068 Check for proxy on the way transparent or reverse?! include"compat.inc"; ifdescription scriptid11040; scriptversion "1.37...

HSWeb HTTP Server /cgi Directory Request Path Disclosure (deprecated)

It is possible to request the physical location of the remote web root by requesting the folder '/cgi'. An attacker can exploit this flaw to gain more knowledge about this host. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVEL 999999 C...

/doc/packages Directory Browsable (deprecated)

The /doc/packages directory is browsable. This directory contains the versions of the packages installed on this host. A remote attacker can use this information to mount further attacks. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVE...

mod_perl for Apache HTTP Server /perl/ Directory Listing (deprecated)

The /perl directory is browsable. This will show you the name of the installed common perl scripts and those that are written by the webmaster and thus may be exploitable. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVEL 999999 C Tenab...

/doc Directory Browsable (deprecated)

The /doc directory is browsable. /doc shows the contents of the /usr/doc directory, which reveals not only which programs are installed but also their versions. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVEL 999999 Copyright 2000 by...

Sun NetBeans Java IDE HTTP Server IP Restriction Bypass Arbitrary File/Directory Access (deprecated)

The remote host is running NetBeans recently renamed to 'Forte' Java IDE. There is a bug in this version that allows anyone to browse the files on this system. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsable directory. %NASLMINLEVEL 999999 C Tenable Network...

Mini SQL w3-msql Arbitrary Directory Access (deprecated)

This plugin has been deprecated due to the age of the vulnerability and unreliability of the plugin. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/12/02. Deprecated due to age of the vulnerability an unreliability of the plugin. include"compat.inc"; ifdescription scriptid10143;...

RPC bootparamd Service Information Disclosure (Deprecated)

The bootparamd RPC service is running. It is used by diskless clients to get the necessary information needed to boot properly. If an attacker uses the BOOTPARAMPROCWHOAMI and provides the correct address of the client, then he will get its NIS domain back from the server. Once the attacker...

Microsoft IIS /scripts Directory Browsable (deprecated)

The /scripts directory is browsable. This gives an attacker valuable information about which default scripts you have installed and also whether there are any custom scripts present that may have vulnerabilities. This plugin has been deprecated. Webmirror3 plugin ID 10662 will identify a browsabl...

Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php`

More info at https://symfony.com/blog/cve-2026-48805-sandbox-state-regression-in-deprecated-internal-wrappers-in-src-resources-core-php...