HTTP TRACE

Transparent or reverse HTTP proxies may be implement on some sites. OpenVAS Vulnerability Test $Id: httptrace.nasl 6768 2017-07-20 08:06:19Z cfischer $ HTTP TRACE Authors: Michel Arboi Copyright: Copyright C 2002 Michel Arboi This program is free software; you can redistribute it and/or modify it...

Enterasys Dragon Enterprise Reporting detection

The remote host is running the Enterasys Dragon Enterprise Reporting on this port. OpenVAS Vulnerability Test $Id: enterasysdragonreportingdetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Enterasys Dragon Enterprise Reporting detection Authors: David Maciejak Copyright: Copyright C 200...

PHP3 Physical Path Disclosure Vulnerability

PHP3 will reveal the physical path of the webroot when asked for a non-existent PHP3 file if it is incorrectly configured. Although printing errors to the output is useful for debugging applications, this feature should not be enabled on production servers. OpenVAS Vulnerability Test $Id:...

AOLserver Default Password

The remote web server is running AOL web server AOLserver with the default username and password set. An attacker may use this to gain control of the remote web server. OpenVAS Vulnerability Test $Id: aolserverdefaultpassword.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: AOLserver Default...

SMTP server accepts us

This script does not perform any security test. It verifies that OpenVAS that connect to the remote SMTP server and that it can send a HELO request. OpenVAS Vulnerability Test $Id: checksmtphelo.nasl 6046 2017-04-28 09:02:54Z teissa $ Description: SMTP server accepts us Authors: Michel Arboi...

QMTP Detection

Checks for the presence of QMTP/QMQP server. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UDDI Detection (HTTP)

The tested Web server seems to be friendly to UDDI requests. The server could be potentially offering web services under some other directory we only tested the web root directory SPDX-FileCopyrightText: 2005 John Lampe Some text descriptions might be excerpted from a referenced sources, and are...

Check if the SMTP server accepts us

This script does not perform any security test. It verifies that the scanner is able to connect to the remote SMTP server and that it can send a HELO request. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

pcAnywhere Service Detection (UDP)

UDP based detection of pcAnywhere. SPDX-FileCopyrightText: 2005 Mathieu Perrin Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10006";...

DB2 DOS

It was possible to crash the DB2 database by sending just one byte to it. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CISCO Secure ACS Management Interface Login Overflow

It may be possible to make this Cisco Secure ACS web serverlogin.exe execute arbitrary code by sending it a too long login url. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Abyss httpd DoS

It was possible to kill the web server by sending a MS-DOS device names in an HTTP request. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Generic HTTP SQLi (Web Application) - Active Check

This script attempts to use SQL injection SQLi techniques on CGI / web application scripts. SPDX-FileCopyrightText: 2002 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Kerio Personal Firewall Buffer Overflow

Kerio Personal Firewall is vulnerable to a buffer overflow on the administration port. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

admin.cgi overflow

The Shoutcast server crashes when a too long argument is given to admin.cgi SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MDaemon IMAP Server DoS (CVE-2001-0064) - Active Check

It is possible to crash the remote MDaemon IMAP server by sending a long argument to the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

ASP/PHP '%20' Source Code Disclosure Vulnerability - Active Check

Multiple products are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2002 Michel Arboi SPDX-FileCopyrightText: New code / detection methods since 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Zeroboard < 4.1pl6 XSS Vulnerability - Active Check

Zeroboard is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Savant cgitest.exe Buffer Overflow DoS Vulnerability

cgitest.exe from Savant web server is installed. This CGI is vulnerable to a buffer overflow which may allow an attacker to crash the server or even run code on it. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

Check Point SecureRemote (SecuRemote) Information Disclosure Vulnerability - Active Check

The remote host seems to be a Check Point FireWall-1 running SecureRemote SecuRemote. The SecuRemote service contains a vulnerability that allows attackers to gain information about the hosts, networks, and users configured on the Firewall. SPDX-FileCopyrightText: 2001 SecuriTeam Some text...