fingerd buffer overflow

OpenVAS was able to crash the remote finger daemon by sending a too long request. This flaw is probably a buffer overflow and might be exploitable to run arbitrary code on this machine. OpenVAS Vulnerability Test $Id: fingeroverflow.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: fingerd...

IPSEC IKE check

The remote IPSEC server seems to have a problem negotiating bogus IKE requests. An attacker may use this flaw to disable your VPN remotely. OpenVAS Vulnerability Test $Id: ikecheck.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IPSEC IKE check Authors: John Lampe Script audit and...

CVSTrac malformed URI infinite loop DoS

The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the parameter parser that may allow an attacker to create a malformed URL, which causes the application to hang. An attacker, exploiting this flaw, would onl...

AppSocket DoS

It seems that it is possible to lock out your printer from the network by opening a few connections and keeping them open. Note that the AppSocket protocol is so crude that OpenVAS cannot check if it is really running behind this port. OpenVAS Vulnerability Test $Id: appsocketDoS.nasl 8023...

SunSolve CD CGI user input validation

Sunsolve CD CGI scripts does not validate user input. Crackers may use them to execute some commands on your system. Note: OpenVAS did not try to perform the attack. OpenVAS Vulnerability Test $Id: sscdinput.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: SunSolve CD CGI user input validatio...

Exclude toplevel domain wildcard host

The host you were trying to scan is blacklisted: its address is known to be returned by a wildcard on some top level domains, or it's the openvas.org web server. You probably mistyped its name. OpenVAS Vulnerability Test $Id: TLDwildcard.nasl 8144 2017-12-15 13:19:55Z cfischer $ Description:...

WebLogic source code disclosure

There is a bug in the Weblogic web application. Namely, by inserting a /ConsoleHelp/ into a URL, critical source code files may be viewed. OpenVAS Vulnerability Test $Id: consolehelp.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: WebLogic source code disclosure Authors: John Lampe...

Xeneo web server %A DoS

It was possible to crash the remote Xeneo web server by requesting a malformed URL ending with /%A or /% OpenVAS Vulnerability Test $Id: xeneopercentDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Xeneo web server %A DoS Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This...

myServer POST Denial of Service

The remote host is running myServer, an open-source http server. This version is vulnerable to remote denial of service attack. With a specially crafted HTTP POST request, an attacker can cause the service to stop responding. OpenVAS Vulnerability Test $Id: myserverpostdos.nasl 8023 2017-12-07...

Apache Remote Command Execution via .bat files

The Apache 2.0.x Win32 installation is shipped with a default script, /cgi-bin/test-cgi.bat, that allows an attacker to execute commands on the Apache server although it is reported that any .bat file could open this vulnerability. An attacker can send a pipe character with commands appended as...

IMP Content-Type XSS Vulnerability

The remote server is running at least one instance of IMP whose version number is between 2.0 and 3.2.3 inclusive. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to cause a victim to unknowingly run arbitrary Javascript code simply by reading a MIME messa...

NNTP password overflow

OpenVAS was able to crash the remote NNTP server by sending a too long password. This flaw is probably a buffer overflow and might be exploitable to run arbitrary code on this machine. OpenVAS Vulnerability Test $Id: nntptoolongpassword.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: NNTP...

Anti OpenVAS defenses

It seems that your web server rejects requests from OpenVAS. It is probably protected by a reverse proxy. OpenVAS Vulnerability Test $Id: antinessus.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Anti OpenVAS defenses Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This progr...

HP-UX ftpd glob() Expansion STAT Buffer Overflow

Buffer overflow in FTP server in HPUX 11 and previous allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings. OpenVAS Vulnerability Test $Id: hpftpglobstat.nasl 6522 2017-07-04 15:22:28Z cfischer $...

RIS Installation Check

This plugin checks if the equipment was installed via RIS. OpenVAS Vulnerability Test $Id: risdetect.nasl 6056 2017-05-02 09:02:50Z teissa $ Description: RIS Installation Check Authors: Jeff Adams Copyright: Copyright C 2004 Jorge Pinto And Nelson Gomes This program is free software; you can...

IMP HTML+TIME XSS Vulnerability

The remote server is running at least one instance of IMP whose version number is 3.2.4 or lower. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to inject arbitrary content, including script, in a specially crafted MIME message. To have an effect, the...

spank.c

Your machine answers to TCP packets that are coming from a multicast address. This is known as the 'spank' denial of service attack. OpenVAS Vulnerability Test $Id: spank.nasl 8145 2017-12-15 13:31:58Z cfischer $ spank.c Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This program ...

PGPMail.pl detection

The 'PGPMail.pl' CGI is installed. Some versions up to v1.31 a least of this CGI do not properly filter user input before using it inside commands. This would allow a cracker to run any command on your server. Note: OpenVAS just checked the presence of this CGI but did not try to exploit the flaw...