SLAD Fetch Results

This script connects to SLAD on a remote host to fetch the result from scripts started earlier. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...

SLAD Fetch Results

This script connects to SLAD on a remote host to fetch the result from scripts started earlier. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS...

SLAD Run

This script connects to SLAD on a remote host to run remote scanners. To work properly, this script requires to be provided with a valid SSH login by means of an SSH key with pass- phrase if the SSH public key is passphrase-protected, or a password to log in. OpenVAS Vulnerability Test Fetch...

Ventrilo Server Malformed Status Query Remote DoS

The remote Ventrilo service can be disabled remotely. Description : A malicious user can crash the remote version of Ventrilo due to a vulnerability in the way the server handles malformed status queries. OpenVAS Vulnerability Test $Id: ventrilodos.nasl 6053 2017-05-01 09:02:51Z teissa $...

Information about the scan

This script displays, for each tested host, information about the scan itself: - The version of the NVT feed - The type of NVT feed Direct, Registered or GPL - The version of the OpenVAS Engine - The port scanners used - The port range scanned - The date of the scan - The duration of the scan - T...

Digital Scribe login.php SQL Injection flaw

The remote web server contains a PHP script which is vulnerable to a SQL injection. Description : The remote web server hosts Digital Scribe, a student-teacher set of scripts written in PHP. The version of Digital Scribe installed on the remote host is prone to SQL injection attacks through the...

Intrusion.com SecureNet sensor detection

The remote host appears to be an Intrusion.com SecureNet sensor on this port. OpenVAS Vulnerability Test $Id: securenetsensordetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Intrusion.com SecureNet sensor detection Authors: David Maciejak Copyright: Copyright C 2005 David Maciejak This...

mailreader.com directory traversal and arbitrary command execution

mailreader.com software is installed. A directory traversal flaw allows anybody to read arbitrary files on your system. OpenVAS Vulnerability Test $Id: mailreader.nasl 5783 2017-03-30 09:03:43Z cfi $ Description: mailreader.com directory traversal and arbitrary command execution Authors: Michel...

IlohaMail Attachment Upload Vulnerability

The target is running at least one instance of IlohaMail version 0.7.9-RC2 or earlier. Such versions do not properly check the upload path for file attachments, which may allow an attacker to place a file on the target in a location writable by the web user if the file-based backend is in use. Fo...

TheServer clear text password

We were able to read the server.ini file It may contain sensitive information like clear text passwords. This flaw is known to affect TheServer. OpenVAS Vulnerability Test $Id: theservercleartext.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: TheServer clear text password Authors: Michel...

Oracle 9iAS Jsp Source File Reading

In a default installation of Oracle 9iAS it is possible to read the source of JSP files. When a JSP is requested it is compiled 'on the fly' and the resulting HTML page is returned to the user. Oracle 9iAS uses a folder to hold the intermediate files during compilation. These files are created in...

cgi.rb

The 'cgi.rb' CGI is installed. Some versions is vulnerable to remote denial of service. By sending a specially crafted HTTP POST request, a malicious user can force the remote host to consume a large amount of CPU ressources. Warning : OpenVAS solely relied on the presence of this CGI, it did not...

Oracle 9iAS Dynamic Monitoring Services

In a default installation of Oracle 9iAS, it is possible to access the Dynamic Monitoring Services pages anonymously. Access to these pages should be restricted. OpenVAS Vulnerability Test $Id: oracle9iapachedms.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Oracle 9iAS Dynamic Monitoring...

Detect talkd server port and protocol version

The remote host is running a 'talkd' daemon. talkd is the server that notifies a user that someone else wants to initiate a conversation with him. OpenVAS Vulnerability Test $Id: ntalkdetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Detect talkd server port and protocol version Authors...

Misconfigured Gnutella

The remote host is running the Gnutella servent service. It seems that the root directory of the remote host is visible through this service. Confidential files might be exported. OpenVAS Vulnerability Test $Id: gnutellaexport.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Misconfigured...

SHOUTcast Server DoS detector vulnerability

This detects SHOUTcast Server's version. If the version equals 1.8.2 it is vulnerable to a denial of service attack. OpenVAS Vulnerability Test $Id: shoutcastversion.nasl 5676 2017-03-22 16:29:37Z cfi $ Description: SHOUTcast Server DoS detector vulnerability Authors: Noam Rathaus Copyright:...

HTTP login page

This script logs onto a web server through a login page and stores the authentication / session cookie. OpenVAS Vulnerability Test $Id: httplogin.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: HTTP login page Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is fre...

mod_access_referer 1.0.2 NULL pointer dereference

The remote web server may be using a modaccessreferer apache module which contains a NULL pointer dereference bug, Abuse of this vulnerability can possibly be used in denial of service attackers against affected systems. OpenVAS Vulnerability Test $Id: modaccessreferer.nasl 8023 2017-12-07...

vpasswd.cgi

The 'vpasswd.cgi' CGI is installed. Some versions do not properly check for special characters and allow a cracker to execute any command on your system. Warning : OpenVAS solely relied on the presence of this CGI, it did not determine if you specific version is vulnerable to that problem OpenVAS...

Mail relaying (thorough test)

The remote SMTP server appears to be insufficiently protected against relaying This means that spammers might be able to use your mail server to send their mails to the world. OpenVAS Vulnerability Test $Id: smtprelay2.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Mail relaying thorough te...