Debian Security Advisory DSA 862-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 862-1. OpenVAS Vulnerability Test $Id: deb8621.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 862-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 382-3 (ssh)

The remote host is missing an update to ssh announced via advisory DSA 382-3. OpenVAS Vulnerability Test $Id: deb3823.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 382-3 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 038-1 (sgml-tools)

The remote host is missing an update to sgml-tools announced via advisory DSA 038-1. OpenVAS Vulnerability Test $Id: deb0381.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 038-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 456-1 (kernel)

The remote host is missing an update to kernel-source-2.2.19, kernel-patch-2.2.19-arm, kernel-image-2.2.19-netwinder, kernel-image-2.2.19-riscpc announced via advisory DSA 456-1. OpenVAS Vulnerability Test $Id: deb4561.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from...

Debian Security Advisory DSA 1184-2 (kernel-source-2.6.8)

The remote host is missing an update to kernel-source-2.6.8 announced via advisory DSA 1184-2. For details on the issues addressed with the missing update, please visit the referenced security advisories. OpenVAS Vulnerability Test $Id: deb11842.nasl 6616 2017-07-07 12:10:49Z cfischer $...

Debian Security Advisory DSA 812-1 (turqstat)

The remote host is missing an update to turqstat announced via advisory DSA 812-1. Peter Karlsson discovered a buffer overflow in Turquoise SuperStat, a program for gathering statistics from Fidonet and Usenet, that can be exploited by a specially crafted NNTP server. For the old stable...

Debian Security Advisory DSA 1211-1 (pdns)

The remote host is missing an update to pdns announced via advisory DSA 1211-1. It was discovered that malformed TCP packets may lead to denial of service and possibly the execution of arbitrary code if the PowerDNS nameserver acts as a recursive nameserver. OpenVAS Vulnerability Test $Id:...

SLAD Fetch Results

This script connects to SLAD on a remote host to fetch the result from scripts started earlier. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...

SLAD Run

This script connects to SLAD on a remote host to run remote scanners. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS Vulnerability Test Fetch...

SLAD Fetch Results

This script connects to SLAD on a remote host to fetch the result from scripts started earlier. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...

Ventrilo Server Malformed Status Query Remote DoS

The remote Ventrilo service can be disabled remotely. Description : A malicious user can crash the remote version of Ventrilo due to a vulnerability in the way the server handles malformed status queries. OpenVAS Vulnerability Test $Id: ventrilodos.nasl 6053 2017-05-01 09:02:51Z teissa $...

Information about the scan

This script displays, for each tested host, information about the scan itself: - The version of the NVT feed - The type of NVT feed Direct, Registered or GPL - The version of the OpenVAS Engine - The port scanners used - The port range scanned - The date of the scan - The duration of the scan - T...

Digital Scribe login.php SQL Injection flaw

The remote web server contains a PHP script which is vulnerable to a SQL injection. Description : The remote web server hosts Digital Scribe, a student-teacher set of scripts written in PHP. The version of Digital Scribe installed on the remote host is prone to SQL injection attacks through the...

HTTP login page

This script logs onto a web server through a login page and stores the authentication / session cookie. OpenVAS Vulnerability Test $Id: httplogin.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: HTTP login page Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is fre...

Open WebMail Content-Type XSS

The target is running at least one instance of Open WebMail whose version is 2.32 or earlier. Such versions are vulnerable to a cross site scripting attack whereby an attacker can cause a victim to unknowingly run arbitrary Javascript code by reading a MIME message with a specially crafted...

osCommerce Cross Site Scripting Bugs

osCommerce is a widely installed open source shopping e-commerce solution. An attacker may use it to perform a cross site scripting attack on this host. OpenVAS Vulnerability Test $Id: osCommercexss.nasl 9087 2018-03-12 17:24:24Z cfischer $ Description: osCommerce Cross Site Scripting Bugs Author...

NNTP message headers overflow

OpenVAS was able to crash the remote NNTP server by sending a message with long headers. This flaw is probably a buffer overflow and might be exploitable to run arbitrary code on this machine. OpenVAS Vulnerability Test $Id: nntptoolongheaders.nasl 8023 2017-12-07 08:36:26Z teissa $ Description:...

SHOUTcast Server DoS detector vulnerability

This detects SHOUTcast Server's version. If the version equals 1.8.2 it is vulnerable to a denial of service attack. OpenVAS Vulnerability Test $Id: shoutcastversion.nasl 5676 2017-03-22 16:29:37Z cfi $ Description: SHOUTcast Server DoS detector vulnerability Authors: Noam Rathaus Copyright:...

IMP HTML MIME Viewer XSS Vulnerabilities

The target is running at least one instance of IMP whose version number is between 3.0 and 3.2.5 inclusive. Such versions are vulnerable to several XSS attacks when viewing HTML messages with the HTML MIME viewer and certain browsers. For additional information, see the 3.2.6 release announcement...

Oracle 9iAS Jsp Source File Reading

In a default installation of Oracle 9iAS it is possible to read the source of JSP files. When a JSP is requested it is compiled 'on the fly' and the resulting HTML page is returned to the user. Oracle 9iAS uses a folder to hold the intermediate files during compilation. These files are created in...