Infinite HTTP request

It was possible to kill the web server by sending an invalid 'infinite' HTTP request that never ends. A cracker may exploit this vulnerability to make your web server crash continually or even execute arbirtray code on your system. OpenVAS Vulnerability Test $Id: wwwinfiniterequestDoS.nasl 6053...

SunFTP Buffer Overflow

Buffer overflow in SunFTP build 91 allows remote attackers to cause a denial of service or possibly execute arbitrary commands by sending more than 2100 characters to the server. OpenVAS Vulnerability Test $Id: sunftpdoverflow.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SunFTP Buffer...

Hidden WWW server name

It seems that your web server tries to hide its version or name, which is a good thing. However, using a special crafted request, OpenVAS was able to discover it. OpenVAS Vulnerability Test $Id: wwwservername.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Hidden WWW server name Authors:...

Moodle post.php XSS

The version of Moodle on the remote host contains a flaw that allows a remote cross site scripting attack because the application does not validate the 'reply' variable upon submission to the 'post.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary...

wu-ftpd MAIL_ADMIN overflow

The remote Wu-FTPd server seems to be vulnerable to a remote flaw. This version fails to properly check bounds on a pathname when Wu-Ftpd is compiled with MAILADMIN enabled resulting in a buffer overflow. With a specially crafted request, an attacker can possibly execute arbitrary code as the use...

Check for bdir.htr files

The file bdir.htr is a default IIS files which can give a malicious user a lot of unnecessary information about your file system. Specifically, the bdir.htr script allows the user to browse and create files on hard drive. As this includes critical system files, it is highly possible that the...

GAMSoft TelSrv 1.4/1.5 Overflow

It is possible to crash the remote telnet server by sending a username that is 4550 characters long. An attacker may use this flaw to prevent you from administering this host remotely. OpenVAS Vulnerability Test $Id: TelSrvDoS.nasl 6053 2017-05-01 09:02:51Z teissa $ Description: GAMSoft TelSrv...

IlohaMail Contacts Deletion Vulnerability

The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions contain a flaw that enables an authenticated user to delete contacts belonging to any user provided the DB-based backend is used to store contacts. The flaw arises because ownership of 'deleteitem...

SunSolve CD CGI user input validation

Sunsolve CD CGI scripts does not validate user input. Crackers may use them to execute some commands on your system. Note: OpenVAS did not try to perform the attack. OpenVAS Vulnerability Test $Id: sscdinput.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: SunSolve CD CGI user input validatio...

IMP HTML+TIME XSS Vulnerability

The remote server is running at least one instance of IMP whose version number is 3.2.4 or lower. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to inject arbitrary content, including script, in a specially crafted MIME message. To have an effect, the...

AppSocket DoS

It seems that it is possible to lock out your printer from the network by opening a few connections and keeping them open. Note that the AppSocket protocol is so crude that OpenVAS cannot check if it is really running behind this port. OpenVAS Vulnerability Test $Id: appsocketDoS.nasl 8023...

Xeneo web server %A DoS

It was possible to crash the remote Xeneo web server by requesting a malformed URL ending with /%A or /% OpenVAS Vulnerability Test $Id: xeneopercentDoS.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Xeneo web server %A DoS Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This...

IMAP Banner

Displays the imap4 service banner. OpenVAS Vulnerability Test $Id: imap4banner.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: IMAP Banner Authors: Vincent Renardias Copyright: Copyright C 2003 StrongHoldNet This program is free software; you can redistribute it and/or modify it under the...

PGPMail.pl detection

The 'PGPMail.pl' CGI is installed. Some versions up to v1.31 a least of this CGI do not properly filter user input before using it inside commands. This would allow a cracker to run any command on your server. Note: OpenVAS just checked the presence of this CGI but did not try to exploit the flaw...

IMP Content-Type XSS Vulnerability

The remote server is running at least one instance of IMP whose version number is between 2.0 and 3.2.3 inclusive. Such versions are vulnerable to a cross-scripting attack whereby an attacker may be able to cause a victim to unknowingly run arbitrary Javascript code simply by reading a MIME messa...

IPSEC IKE check

The remote IPSEC server seems to have a problem negotiating bogus IKE requests. An attacker may use this flaw to disable your VPN remotely. OpenVAS Vulnerability Test $Id: ikecheck.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: IPSEC IKE check Authors: John Lampe Script audit and...

WebLogic source code disclosure

There is a bug in the Weblogic web application. Namely, by inserting a /ConsoleHelp/ into a URL, critical source code files may be viewed. OpenVAS Vulnerability Test $Id: consolehelp.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: WebLogic source code disclosure Authors: John Lampe...

Apache Remote Command Execution via .bat files

The Apache 2.0.x Win32 installation is shipped with a default script, /cgi-bin/test-cgi.bat, that allows an attacker to execute commands on the Apache server although it is reported that any .bat file could open this vulnerability. An attacker can send a pipe character with commands appended as...

Mailman Password Retrieval

The target is running version of the Mailman mailing list software that allows a list subscriber to retrieve the mailman password of any other subscriber by means of a specially crafted mail message to the server. That is, a message sent to $listname-request@$target containing the lines : passwor...

HP-UX ftpd glob() Expansion STAT Buffer Overflow

Buffer overflow in FTP server in HPUX 11 and previous allows remote attackers to execute arbitrary commands by creating a long pathname and calling the STAT command, which uses glob to generate long strings. OpenVAS Vulnerability Test $Id: hpftpglobstat.nasl 6522 2017-07-04 15:22:28Z cfischer $...