GLSA-200411-12 : zgv: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200411-12 zgv: Multiple buffer overflows Multiple arithmetic overflows have been detected in the image processing code of zgv. Impact : An attacker could entice a user to open a specially crafted image file, potentially resulting ...

GLSA-200411-10 : Gallery: XSS vulnerability

The remote host is affected by the vulnerability described in GLSA-200411-10 Gallery: XSS vulnerability Jim Paris has discovered a cross-site scripting vulnerability in Gallery. Impact : By sending a carefully crafted URL, an attacker can inject and execute script code in the victim's browser...

Canon ImageRUNNER SMTP Arbitrary Content Printing

The remote host seems to be a Canon ImageRUNNER printer, which runs a SMTP service. It is possible to send an email to the SMTP service and have it printed out. An attacker may use this flaw to send an endless stream of emails to the remote device and cause a denial of service by using all of the...

Solaris 8 (sparc) : 111232-01

SunOS 5.8: patch in.fingerd. Date this patch was last updated by Sun : Apr/25/01 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Bagle.B Worm Detection

The remote host has the Bagle.B worm installed. This is a variant of the Bagle worm which spreads via email and has a backdoor that listens on port 8866. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12063; scriptversion"1.26"; scriptcvsdate"Date: 2019/11/25";...

Microsoft IIS ODBC Tool getdrvrs.exe DSN Creation

ODBC tools are present on the remote host. ODBC tools could allow a malicious user to hijack and redirect ODBC traffic, obtain SQL user names and passwords or write files to the local drive of a vulnerable server. Example: http://www.example.com/scripts/tools/getdrvrs.exe %NASLMINLEVEL 70300 This...

MS03-034: Flaw in NetBIOS Could Lead to Information Disclosure (824105) (uncredentialed check)

The remote host is running a version of the NetBT name service that suffers from a memory disclosure problem. An attacker may send a special packet to the remote NetBT name service, and the reply will contain random arbitrary data from the remote host memory. This arbitrary data may be a fragment...

Postfix < 2.0 Multiple Vulnerabilities

The remote host is running a version of Postfix that is as old as or older than 1.1.12. There are two vulnerabilities in this version that could allow an attacker to remotely disable it, or to be used as a DDoS agent against arbitrary hosts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

phPay admin/phpinfo.php Information Disclosure

The remote host is running phPay, an online shop management system. This package contains multiple information leakages that could allow an attacker to obtain the physical path of the installation on the remote host or even the exact version of the components used by the remote host by using the...

Irix Performance Copilot Service Information Disclosure

The service 'IRIX performance copilot' is running. This service discloses sensitive information about the remote host, and may be used by an attacker to perform a local denial of service. This warning may be a false positive since the presence of the bug was not verified locally. C Tenable Networ...

TCP/IP Predictable ISN (Initial Sequence Number) Generation Weakness

The remote host has predictable TCP sequence numbers. An attacker may use this flaw to establish spoofed TCP connections to this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10443; scriptversion"1.31"; scriptcvsdate"Date: 2019/03/06 18:38:55"; scriptcveid...

Microsoft Windows Script Host 5.15.5 - GetObject() File Disclosure

Microsoft Windows Script Host 5.15.5 - GetObject File Disclosure source: https://www.securityfocus.com/bid/1718/info It is possible for an outside attacker to view known files on a remote system if the target user visits a website or opens an email containing a specially formed script containing...

OpenSSH < 2.1.1 UseLogin Local Privilege Escalation

According to its banner, the remote host appears to be running OpenSSH version older than 2.1.1. Such versions are reportedly affected by a local privilege esclation vulnerability. If the UseLogin option is enabled, then sshd does not switch to the uid of the user logging in. Instead, sshd relies...

Microsoft IIS 4.0 - UNC Mapped Virtual Host

MS Commercial Internet System 2.0/2.5,IIS 4.0,Proxy Server 2.0,Site Server Commerce Edition 3.0 UNC Mapped Virtual Host Vulnerability source: https://www.securityfocus.com/bid/1081/info If a virtual host root is mapped to a UNC share, a backward slash "" appended to an ASP or HTR extension in a...

Yamaha MidiPlug 1.1 b-j MidiPlug - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/760/info There is a buffer overflow in the MidiPlug that may allow arbitrary code to be executed on the local host. This overflow occurs if a long "Text" variable is specified within an EMBED tag in a web page. Instructions in the text variable may be...

Microsoft Windows NT SCM Malformed Resource Enumeration Request DoS

An 'rfpoison' packet has been sent to the remote host. This packet is supposed to crash the 'services.exe' process, making the system unstable. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid10204; scriptversion"1.32";...

CVE-1999-0045

List of arbitrary files on Web host via nph-test-cgi script...

3Com HiPer Access Router Card (HiperARC) IAC Packet Flood DoS

It was possible to reboot the remote host likely a HyperARC router by sending it a high volume of IACs. An attacker may use this flaw to shut down your internet connection. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10108; scriptversion"1.29"; scriptcvsdate"Date:...

Security Update for Windows XP x64 Edition (KB917344)

A security issue has been identified in the Windows Script Host that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...