1787 matches found
Horde IMP IMP_MIME_Viewer_html Class XSS
The remote server is running at least one instance of IMP whose version number is between 3.0 and 3.2.1 inclusive. Such versions are vulnerable to several cross-scripting attacks whereby an attacker can cause a victim to unknowingly run arbitrary JavaScript code simply by reading an HTML message...
Avirt Multiple Product HTTP Proxy Overflow (deprecated)
This plugin has been deprecated as it resulted in false positives without reliably detecting the vulnerability on the intended target. Avirt software is not currently being distributed or maintained. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2020/03/30. include"compat.inc";...
ProtWare HTML Guardian 6.x - Encryption
source: https://www.securityfocus.com/bid/7169/info A weakness has been reported in the encryption scheme used by ProtWare HTML Guardian. Specifically, the encryption scheme implemented obfuscates data using a simple bit shifting technique, making it trivial for attackers to reverse. Administrato...
BSD in.lpd File Name Handling Remote Overflow
The remote bsd-lpd daemon might be vulnerable to a buffer overflow when sent a too long file name and then asked to show the print queue when the file is being printed. An attacker may use this flaw to gain a shell on this host. Because of the conditions to positively check for this flaw are very...
Virus Infection Detection (deprecated)
This script checks for the presence of different viruses on the remote host, by using the SMB credentials that you provide to Nessus. - W32/Badtrans-B - JSGIGGER.A@mm - W32/Vote-A - W32/Vote-B - CodeRed - W32.Sircam.Worm@mm - W32.HLLW.Fizzer@mm - W32.Sobig.B@mm - W32.Sobig.E@mm - W32.Sobig.F@mm -...
PlatinumFTPServer Multiple Vulnerabilities
Platinum FTP server for Win32 has several vulnerabilities in the way it checks the format of command strings passed to it. This leads to the following vulnerabilities in the server : - The 'dir' command can be used to examine the filesystem of the machine and gather further information about the...
Alcatel OmniSwitch 7700/7800 Switches Backdoor Access (deprecated)
This plugin has been deprecated due to excessive false positives since it flags any telnet banner discovered on TCP 6778. %NASLMINLEVEL 999999 This script was written by deepquest See the Nessus Scripts License for details Modifications by rd: - added ref:...
Perl2Exe 1.0 95.0 26.0 - Code Obfuscation
Perl2Exe 1.0 95.0 26.0 - Code Obfuscation source: https://www.securityfocus.com/bid/6909/info Perl2Exe obfuscates Perl source code using a reversible algorithm when converting it to an executable format. This occurs when the "encrypt" option is selected. Those who use Perl2Exe with the expectatio...
Perl2Exe 1.0 9/5.0 2/6.0 - Code Obfuscation
source: https://www.securityfocus.com/bid/6909/info Perl2Exe obfuscates Perl source code using a reversible algorithm when converting it to an executable format. This occurs when the "encrypt" option is selected. Those who use Perl2Exe with the expectation that the source code will be concealed...
Nimda Worm Infected HTML File Detection
The remote web server appears to have been compromised by the Nimda mass mailing worm. It uses various known IIS vulnerabilities to compromise the server. Visitors to such a compromised web server may be prompted to download an .eml Outlook Express email file, which contains the worm as an...
CVE-2000-0568
Sybergen Secure Desktop 2.1 is affected by CVE-2000-0568 due to improper protection against ICMP Type 9 false router advertisements, allowing remote attackers to modify default routes. The available sources document the product and impact but do not provide specific exploit code, affected version...
LDAP NULL BASE Search Access
The remote LDAP server supports search requests with a NULL, or empty, base object. This allows information to be retrieved without any prior knowledge of the directory structure. Coupled with a NULL BIND, an anonymous user may be able to query your LDAP server using a tool such as 'LdapMiner'...
CVE-2001-0034
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4proxy variable, which allows the user to generate false proxy responses and possibly gain privileges...
CVE-2001-0034
KTH Kerberos IV allows local users to specify an alternate proxy using the krb4proxy variable, which allows the user to generate false proxy responses and possibly gain privileges...
Zope Image and File Update Data Protection Bypass
According to its banner, the remote web server is Zope 2.2.5. Such versions suffer from a security issue involving incorrect protection of a data updating method on Image and File objects. Because the method is not correctly protected, it is possible for users with DTML editing privileges to upda...
[SECURITY] New version of gnupg installed
------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 11, 2000 - ------------------------------------------------------------------------ Package: gnupg Debian-specific: no...
Multiple vulnerabilities in Sybergen Secure Desktop
Infosec Security Vulnerability Report No: Infosec.20000625.sybergen.a =============================== Vulnerability Summary --------------------- Problem 1: Sybergen Secure Desktop does not protect against false router advertisements. Problem 2: Sybergen Secure Desktop dies when a user clears the...
Уязвимость в BlackICE IDS
Для уведомления об атаке с агента на сервер используется логин iceman без пароля, что позволяет давать ложные сигналы. Кроме того, для обработки сообщений используется библиотека MS Jat 3.5 имеющая уязвимости, позволяющие удаленное выполнение кода...
CVE-1999-0169
This entry documents CVE-1999-0169 affecting NFS, where an attacker can read and write any file on the system by specifying a false UID. The vulnerability centers on the NFS service’s UID handling, enabling full confidentiality and integrity/availability impact per the provided metrics. Connected...