Check for ident Service

The remote host is running an ident daemon. The Ident Protocol is designed to work as a server daemon, on a user SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

irc-info NSE Script

Gathers information from an IRC server. It uses STATS, LUSERS, and other queries to obtain this information. Example Usage nmap -sV -sC Script Output 6665/tcp open irc | irc-info: | server: asimov.freenode.net | version: ircd-seven-1.1.320111112-b71671d1e846,charybdis-3.4-dev. asimov.freenode.net...

kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option

The sctpauthepsethmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, does not verify that the identifier index is within the bounds established by SCTPAUTHHMACIDMAX, which...

kernel: sctp_getsockopt_hmac_ident information disclosure

The sctpgetsockopthmacident function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows loc...

PostgreSQL privilege escalation via dblink

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete...

GLSA-200801-15 : PostgreSQL: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200801-15 PostgreSQL: Multiple vulnerabilities If using the 'expression indexes' feature, PostgreSQL executes index functions as the superuser during VACUUM and ANALYZE instead of the table owner, and allows SET ROLE and SET SESSI...

PostgreSQL privilege escalation via dblink

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete...

PostgreSQL privilege escalation via dblink

The DBLink module in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, 7.4 before 7.4.19, and 7.3 before 7.3.21, when local trust or ident authentication is used, allows remote attackers to gain privileges via unspecified vectors. NOTE: this issue exists because of an incomplete...

Vulnerability in contrib module (CVE-2007-6601)

DBLink functions combined with local trust or ident access control could be used by a malicious user togain superuser privileges. A valid login is required to exploit this vulnerability...

CVE-2002-2390

CVE-2002-2390 concerns a buffer overflow in the IDENT daemon (identd) used by Trillian. Affects Trillian versions 0.6351, 0.725, 0.73, 0.74 and 1.0 pro; vulnerability arises from handling a long request, enabling remote denial of service (crash) and potentially arbitrary code execution. Public de...

CVE-2002-2390

Buffer overflow in the IDENT daemon identd in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long request...

MDKA-2007:083 : imap

Due to the configuration of the xinetd configuration files included in the imap package, initial connections to the IMAP and/or POP3 services would have a substantial delay due to xinetd attempting to perform ident lookups. This update has corrected xinetd configuration files that remove the iden...

Sendmail 8.6.9 IDENT远程缓冲区溢出漏洞

Sendmail是一个广为使用的Internet邮件传输程序。 8.6.9版本的Sendmail的IDENT功能实现上存在缓冲区溢出漏洞，远程攻击者可以利用此漏洞直接得到主机的root权限。 Eric Allman Sendmail 8.6.9 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 关闭IDENT协议功能 在Sendmail的配置文件中加入： Orident=0 然后重启Sendmail。 厂商补丁： Eric Allman ----------- 目前厂商已经在新版的软件中修复了这个安全问题，请到厂商的主页下载：...

squid security update

CentOS Errata and Security Advisory CESA-2006:0052 An updated squid package that fixes a security vulnerability as well as several issues is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Squid is a high-performance proxy cachin...

Detect slident and or fake identd

The remote ident server returns random token instead of leaking real user IDs. This is a good thing. OpenVAS Vulnerability Test $Id: slident.nasl 7052 2017-09-04 11:50:51Z teissa $ Detect slident and or fake identd Authors: Michel Arboi Copyright: Copyright C 2005 Michel Arboi This program is fre...

IRC bot ident server detection

This host seems to be running an ident server, but the ident server responds to an empty query with a random userid. This behavior may be indicative of an irc bot, worm, and/or virus infection. It is very likely this system has been compromised. OpenVAS Vulnerability Test $Id: identbackdoor.nasl...

IRC bot ident server detection

This host seems to be running an ident server, but the ident server responds to an empty query with a random userid. This behavior may be indicative of an irc bot, worm, and/or virus infection. It is very likely this system has been compromised. SPDX-FileCopyrightText: 2005 Brian Smith-Sweeney So...

IRC bot detection

This host seems to be running an ident server, but before any request is sent, the server gives an answer about a connection to port 6667. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

FreeBSD : ngircd -- format string vulnerability (bc4a7efa-7d9a-11d9-a9e7-0001020eed82)

A No System Group security advisory reports that ngircd is vulnerable to a format string vulnerability in the LogResolver function of log.c, if IDENT support is enabled. This could allow a remote attacker to execute arbitrary code with the permissions of the ngircd daemon, which is root by defaul...

IRC Bot Detection

This host seems to be running an ident server, but before any request is sent, the server gives an answer about a connection to port 6667. It is very likely this system has been compromised by an IRC bot and is now a 'zombie' that can participate in 'distributed denial of service' DDoS attacks...