afp-serverinfo NSE Script

Shows AFP server information. This information includes the server's hostname, IPv4 and IPv6 addresses, and hardware type for example Macmini or MacBookPro. Script Arguments afp.password, afp.username See the documentation for the afp library. Example Usage nmap -sV -sC Script Output PORT STATE...

IBM Informix Detection (Informix Protocol)

IBM Informix RDBMS is running at this port. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CA BrightStor ARCserve Backup caloggerd.exe Null Hostname Denial of Service (CVE-2007-2772)

A Null dereference vulnerability exists in the CA BrightStor ARCserve Backup caloggerd process. The vulnerability is due to insufficient data validation when parsing strings in received RPC requests. A remote unauthenticated attacker may leverage this vulnerability by sending a specially crafted...

[Backports-security-announce] Security Update for proftpd-dfsg

Francesco P. Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2009-3639 The modtls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a \0 character in a domain name i...

Intellicom 1.3 - 'NetBiterConfig.exe Hostname' Data Remote Stack Buffer Overflow (PoC)

!/usr/bin/python source: https://www.securityfocus.com/bid/37325/info Intellicom 'NetBiterConfig.exe' is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

CVE-2009-3845

The port-3443 HTTP server in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts...

Mandriva Security Advisory MDVSA-2009:252-1 (perl-IO-Socket-SSL)

The remote host is missing an update to perl-IO-Socket-SSL announced via advisory MDVSA-2009:252-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow

This module exploits a buffer overflow in Computer Associates BrightStor ARCserve r11.5 build 3884. By sending a specially crafted RPC request to opcode 0x342, an attacker could overflow the buffer and execute arbitrary code. In order to successfully exploit this vulnerability, you will need set...

CVE-2009-3639

The modtls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended...

Design/Logic Flaw

The modtls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended...

DEBIAN-CVE-2009-3639

The modtls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate, which allows remote attackers to bypass intended...

Mandriva Linux Security Advisory : perl-IO-Socket-SSL (MDVSA-2009:252-1)

A vulnerability was discovered and corrected in perl-IO-Socket-SSL : The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the...

MDVSA-2009:178 : perl-IO-Socket-SSL

A vulnerability was discovered and corrected in perl-IO-Socket-SSL: The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the...

Fedora Core 10 FEDORA-2009-8622 (gnutls)

The remote host is missing an update to gnutls announced via advisory FEDORA-2009-8622. OpenVAS Vulnerability Test $Id: fcore20098622.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-8622 gnutls Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 10 FEDORA-2009-8622 (gnutls)

The remote host is missing an update to gnutls announced via advisory FEDORA-2009-8622. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Core FTP LE 2.1 Buffer Overflow

!/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX 00000064 ECX 00410041...

Core FTP LE 2.1 build 1612 local buffer overflow PoC

No description provided by source. !/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX...

Core FTP LE 2.1 build 1612 - Local Buffer Overflow (PoC)

!/usr/bin/env python Core FTP LE v2.1 build 1612 Local Buffer Overflow PoC Unicode Found By: DrIDE Tested On: XPSP3, 7RC Notes: Most likely other versions are vulnerable too. Usage: File, Quick Connect, Paste into Hostname, Connect Register Dump on XPSP3 """ EAX 00000064 ECX 00410041...

MySQL COM_TABLE_DUMP Information Leakage and Arbitrary Command Execution

No description provided by source. / April 21.st 2006 myexploit.c MySql COMTABLEDUMP Memory Leak & MySql remote B0f MySql = 5.0.20 MySql COMTABLEDUMP Memory Leak MySql = 4.x.x copyright 2006 Stefano Di Paola stefano.dipaolaatwisec.it GPL 2.0 Disclaimer: In no event shall the author be liable for...

CVE-2009-3024

The verifyhostnameofcert function in the certificate checking feature in IO-Socket-SSL IO::Socket::SSL 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate...