iMesh P2P Client Detection

iMesh is installed on the remote Windows host. iMesh is a peer-to- peer file sharing application. Make sure the use of this program fits with your corporate security policy. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid29729; scriptversion"1.15";...

CVE-2004-2697

Technical details for CVE-2004-2697 are not publicly available in the provided documents; monitor for updates.

CVE-2004-2697

The Inventory Scout daemon invscoutd 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument log file. NOTE: this might be related to CVE-2006-5002...

CVE-2004-2697: Concurrent Execution using Shared Resource with Improper Synchronization

The Inventory Scout daemon invscoutd 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument log file. NOTE: this might be related to CVE-2006-5002...

Design/Logic Flaw

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7 purchasing...

PT-2007-6241 · Frontaccounting · Frontaccounting

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the path to root parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7...

Design/Logic Flaw

Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...

CVE-2007-4798

Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...

CVE-2007-4798

Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...

CVE-2007-4798: Undefined Security Weakness

Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...

IBM AIX Inventory Scout本地拒绝服务漏洞

IBM AIX是一款商业性质的操作系统。 IBM AIX invscout代码存在访问验证问题，本地攻击者可以利用漏洞删除重要系统文件进行拒绝服务攻击。 invscout用于执行Inventory Scout进程的独立运行版本的实例。目前没有详细漏洞细节提供。 IBM AIX 5.3 IBM AIX 5.2 采用如下补丁： IBM AIX 5.2 IBM invscoutifix.tar.Z ftp://aix.software.ibm.com/aix/efixes/security/invscoutifix.tar.Z IBM AIX 5.3 IBM invscoutifix.tar....

anyinventory-rfi.txt

AnyInventory = 1.9.1 Remote file inclusion Download script : http://physics.ramapo.edu/downloads/anyInventory-1.9.1.tar.gz Exploit : http://victime.com/anyInventorypath/environment.php?DIRPREFIX= shell.txt? Dork : anyInventory, the most flexible and powerful web-based inventory system Discovered ...

AnyInventory <= 1.9.1 (environment.php) Remote File Inclusion Vuln

No description provided by source. AnyInventory = 1.9.1 Remote file inclusion Download script : http://physics.ramapo.edu/downloads/anyInventory-1.9.1.tar.gz Exploit : http://victime.com/anyInventorypath/environment.php?DIRPREFIX= shell.txt? Dork : anyInventory, the most flexible and powerful...

CVE-2007-2344

The CVE-2007-2344 entry concerns the BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1 (and possibly earlier) running on Windows. A remote attacker can cause a denial-of-service (daemon crash) by sending a UDP packet with an invalid “packet type” field. The ava...

CVE-2007-2344: Undefined Security Weakness

The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Windows allows remote attackers to cause a denial of service daemon crash via a UDP packet that contains an invalid "packet type" field...

CVE-2007-2343: Undefined Security Weakness

Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via crafted request packets that contain long file names...

Trend Micro ServerProtect Detection

The remote host is running Trend Micro ServerProtect for Windows / NetWare, an antivirus / antispyware for Windows and NetWare servers. C Tenable Network Security include"compat.inc"; if description scriptid24679; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2006-5943

Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager allow remote attackers to execute arbitrary SQL commands via the 1 pictable, 2 picfield, or 3 where parameter...

CVE-2006-5942

Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...

CVE-2006-5942

Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...