Wordtrans-web exec_wordtrans Function Arbitrary Command Execution

The remote host is running wordtrans-web, a web-based front-end for wordtrans, for translating words. The version of wordtrans-web installed on the remote host fails to sanitize input to the 'advanced' parameter of the 'wordtrans.php' script before using it in an 'passthru' statement to execute P...

Enumerate MAC Addresses via SSH

Nessus was able to enumerate MAC addresses by connecting to the remote host via SSH with the supplied credentials. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33276; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/12/20";...

TrailScout Module For Drupal Session Cookie SQL Injection

The remote host is running TrailScout, a third-party module for Drupal that displays a breadcrumb-like trail showing pages a user recently visited on a site. The version of the TrailScout module installed on the remote host fails to sanitize user-supplied input to the session cookie before using ...

Debian: Security Advisory (DSA-1596-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1595-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM AFP Viewer Plug-in SRC Property Buffer Overflow

The Windows remote host contains IBM's AFP Viewer plug-in, which allows for viewing AFP Advanced Function Presentation documents from a web browser. The version of the plug-in installed on the remote host reportedly contains a heap-based buffer overflow that can be triggered when processing a 'SR...

GLSA-200806-08 : OpenSSL: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200806-08 OpenSSL: Denial of Service Ossi Herrala and Jukka Taimisto of Codenomicon discovered two vulnerabilities: A double free call in the TLS server name extension CVE-2008-0891. The OpenSSL client code does not properly handl...

Kerberos < 1.6.4 vulnerability

The remote host is probably affected by the vulnerabilities described in CVE-2008-0062, CVE-2008-0063, CVE-2008-0947, CVE-2008-0948 Impact CVE-2008-0062: An unauthenticated remote attacker may cause a krb4-enabled KDC to crash, expose information, or execute arbitrary code. Successful exploitatio...

Mozilla Firefox, Thunderbird, Seamonkey. Several vulnerabilitys (Windows)

The remote host is probable affected by the vulnerabilities described in CVE-2008-0416, CVE-2007-4879, CVE-2008-1195, CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237, CVE-2008-1238, CVE-2008-1240, CVE-2008-1241 and more. OpenVAS Vulnerability Test $Id: smbclmozilla.nasl...

Debian Security Advisory DSA 1588-2 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1588-2. OpenVAS Vulnerability Test $Id: deb15882.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1588-2 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian Security Advisory DSA 1592-2 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1592-2. OpenVAS Vulnerability Test $Id: deb15922.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1592-2 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

MS08-036: Vulnerabilities in Pragmatic General Multicast (PGM) Could Allow Denial of Service (950762)

The remote version of Windows is affected by a vulnerability in the Pragmatic General Multicast protocol installed with the MSMQ service. An attacker may exploit this flaw to crash the remote host remotely. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33137;...

MS08-032: Cumulative Security Update of ActiveX Kill Bits (950760)

The remote host contains the sapi.dll ActiveX control. The version of this control installed on the remote host reportedly contains multiple memory corruption flaws. If an attacker can trick a user on the affected host into visiting a specially crafted web page, he may be able to leverage this...

CA Secure Content Manager HTTP Gateway Service FTP Vulnerabilities

The remote host is running Computer Associates' Secure Content Manager, a gateway product for filtering messaging and web traffic. The HTTP Gateway component 'icihttp.exe' of the version of Secure Content Manager installed on the remote host does not sufficiently check responses to FTP 'LIST' and...

Skype file: URI Handling Security Bypass Arbitrary Code Execution (uncredentialed check)

The version of Skype installed on the remote host reportedly uses improper logic in its 'file:' URI handler when validating URLs by failing to check for certain dangerous file extensions and checking for others in a case-sensitive manner. If an attacker can trick a user on the affected host into...

Akamai Download Manager ActiveX Control < 2.2.3.6 Arbitrary File Download

The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly is affected by a parameter injection vulnerability that could be exploited to download arbitrary files and place...

AIX 610000 : U813453

The remote host is missing AIX PTF U813453 which is related to the security of the package bos.rte.net You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 530007 : U817625

The remote host is missing AIX PTF U817625 which is related to the security of the package bos.rte.libpthreads You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

AIX 610000 : U813433

The remote host is missing AIX PTF U813433 which is related to the security of the package devices.common.IBM.fc.hba-api You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 530007 : U817657

The remote host is missing AIX PTF U817657 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...