Too long basic authentication DoS

It was possible to kill the web server by sending a request with an too long Basic authentication field. A cracker may exploit this vulnerability to make your web server crash continually or even execute arbirtray code on your system. OpenVAS Vulnerability Test $Id: wwwtoolongauthDoS.nasl 8023...

Open WebMail Content-Type XSS

The target is running at least one instance of Open WebMail whose version is 2.32 or earlier. Such versions are vulnerable to a cross site scripting attack whereby an attacker can cause a victim to unknowingly run arbitrary Javascript code by reading a MIME message with a specially crafted...

IlohaMail Attachment Upload Vulnerability

The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions do not properly check the upload path for file attachments, which may allow an attacker to place a file on the target in a location writable by the web user if the file-based backend is in use. Fo...

Unprotected PC Anywhere Service

The PC Anywhere service does not require a password to access the desktop of this system. If this machine is running Windows 95, 98, or ME, gaining full control of the machine is trivial. If this system is running NT or 2000 and is currently logged out, an attacker can still spy on and hijack a...

osCommerce Cross Site Scripting Bugs

osCommerce is a widely installed open source shopping e-commerce solution. An attacker may use it to perform a cross site scripting attack on this host. OpenVAS Vulnerability Test $Id: osCommercexss.nasl 9087 2018-03-12 17:24:24Z cfischer $ Description: osCommerce Cross Site Scripting Bugs Author...

NNTP message headers overflow

OpenVAS was able to crash the remote NNTP server by sending a message with long headers. This flaw is probably a buffer overflow and might be exploitable to run arbitrary code on this machine. OpenVAS Vulnerability Test $Id: nntptoolongheaders.nasl 8023 2017-12-07 08:36:26Z teissa $ Description:...

Mail relaying (thorough test)

The remote SMTP server appears to be insufficiently protected against relaying This means that spammers might be able to use your mail server to send their mails to the world. OpenVAS Vulnerability Test $Id: smtprelay2.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Mail relaying thorough te...

mailreader.com directory traversal and arbitrary command execution

mailreader.com software is installed. A directory traversal flaw allows anybody to read arbitrary files on your system. OpenVAS Vulnerability Test $Id: mailreader.nasl 5783 2017-03-30 09:03:43Z cfi $ Description: mailreader.com directory traversal and arbitrary command execution Authors: Michel...

Webserver4everyone too long URL

It may be possible to make Webserver4everyone execute arbitrary code by sending it a too long url with the Host: field set to 127.0.0.1 OpenVAS Vulnerability Test $Id: ws4etoolongurl.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: Webserver4everyone too long URL Authors: Michel Arboi...

SHOUTcast Server DoS detector vulnerability

This detects SHOUTcast Server's version. If the version equals 1.8.2 it is vulnerable to a denial of service attack. OpenVAS Vulnerability Test $Id: shoutcastversion.nasl 5676 2017-03-22 16:29:37Z cfi $ Description: SHOUTcast Server DoS detector vulnerability Authors: Noam Rathaus Copyright:...

mod_access_referer 1.0.2 NULL pointer dereference

The remote web server may be using a modaccessreferer apache module which contains a NULL pointer dereference bug, Abuse of this vulnerability can possibly be used in denial of service attackers against affected systems. OpenVAS Vulnerability Test $Id: modaccessreferer.nasl 8023 2017-12-07...

WowBB view_user.php SQL Injection Flaw

The remote web server contains a PHP script that is affected by a SQL injection flaw. Description : The remote host is running WowBB, a web-based forum written in PHP. The remote version of this software is vulnerable to SQL injection attacks through the script 'viewuser.php'. A malicious user ca...

Oracle 9iAS Dynamic Monitoring Services

In a default installation of Oracle 9iAS, it is possible to access the Dynamic Monitoring Services pages anonymously. Access to these pages should be restricted. OpenVAS Vulnerability Test $Id: oracle9iapachedms.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Oracle 9iAS Dynamic Monitoring...

Oracle 9iAS Jsp Source File Reading

In a default installation of Oracle 9iAS it is possible to read the source of JSP files. When a JSP is requested it is compiled 'on the fly' and the resulting HTML page is returned to the user. Oracle 9iAS uses a folder to hold the intermediate files during compilation. These files are created in...

DB4Web directory traversal

It is possible to read any file on your system through the DB4Web software. OpenVAS Vulnerability Test $Id: db4webdirtrav.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: DB4Web directory traversal Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free software; y...

SunFTP Buffer Overflow

Buffer overflow in SunFTP build 91 allows remote attackers to cause a denial of service or possibly execute arbitrary commands by sending more than 2100 characters to the server. OpenVAS Vulnerability Test $Id: sunftpdoverflow.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SunFTP Buffer...

IlohaMail Contacts Deletion Vulnerability

The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions contain a flaw that enables an authenticated user to delete contacts belonging to any user provided the DB-based backend is used to store contacts. The flaw arises because ownership of 'deleteitem...

Moodle post.php XSS

The version of Moodle on the remote host contains a flaw that allows a remote cross site scripting attack because the application does not validate the 'reply' variable upon submission to the 'post.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary...

ncrack: ftp

This plugin runs ncrack to find ftp accounts & passwords by brute force. OpenVAS Vulnerability Test ftp Remote password cracking using ncrack svn co svn://svn.insecure.org/nmap-exp/ithilgore/ncrack Tested with SVN r14943. Based on hydra scripts by Michel Arboi Authors: Vlatko Kosturjak This progr...

wu-ftpd MAIL_ADMIN overflow

The remote Wu-FTPd server seems to be vulnerable to a remote flaw. This version fails to properly check bounds on a pathname when Wu-Ftpd is compiled with MAILADMIN enabled resulting in a buffer overflow. With a specially crafted request, an attacker can possibly execute arbitrary code as the use...