WinSCP URL Protocol Handler Arbitrary File Transfer

According to its version, the installation of WinSCP on the remote host fails to completely sanitize input to the SCP and SFTP protocol handlers. If an attacker can trick a user on the affected host into clicking on a malicious link, a file transfer can be initiated to or from the affected host. ...

MS07-054: Vulnerability in MSN Messenger and Windows Live Messenger Could Allow Remote Code Execution (942099)

The remote host is running MSN Messenger or Windows Live Messenger. The version of Messenger used on the remote host is vulnerable to a remote buffer overflow in the way it handles webcam and video chat sessions. An attacker may exploit this vulnerability to execute arbitrary code on the remote...

Yahoo! Messenger YVerInfo ActiveX Buffer Overflows

The remote host contains the 'YVerInfo' ActiveX control, distributed as part of the Yahoo! services suite typically downloaded with the installer for Yahoo! Messenger. The version of this control installed on the remote host reportedly contains buffer overflows involving its 'fvCom' and 'info'...

Apache Tomcat < 5.5.25 / 6.0.x < 6.0.14 Multiple Vulnerabilities

Binary data 4167.prm...

MS07-044: Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (940965)

The remote host is running a version of Microsoft Excel that is affected by various flaws that may allow arbitrary code to be run. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have it open it with Microsoft Excel. C Tenable Network Security, Inc...

Nessus Windows < 3.0.6.1 ScanCtrl ActiveX Multiple Method File Manipulation

The remote host contains the ScanCtrl ActiveX control, a part of Nessus for Windows. The version of the ScanCtrl ActiveX control, installed as part of Nessus for Windows on the remote host, fails to validate input to several methods. If an attacker can trick a user on the affected host into...

GLSA-200707-07 : MPlayer: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200707-07 MPlayer: Multiple buffer overflows Stefan Cornelius and Reimar Doffinger of Secunia Research discovered several boundary errors in the functions cddbqueryparse, cddbparsematcheslist and cddbreadparse, each allowing for a...

GLSA-200707-06 : XnView: Stack-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-200707-06 XnView: Stack-based buffer overflow XnView is vulnerable to a stack-based buffer overflow while processing an XPM file with an overly long section string greater than 1024 bytes. Impact : An attacker could entice a user ...

Citrix Presentation Server Clients Program Neighborhood Agent (PNAgent) Content Redirection Remote DoS

Citrix Presentation Server Client is installed on the remote host. It is used to access published resources such as applications stored on servers running Citrix Presentation Server. The Program Neighborhood Agent component of the version of Citrix Presentation Server Client on the remote host ma...

Maia Mailguard login.php lang Parameter Local File Inclusion

The remote host is running Maia Mailguard, a spam and virus management system written in PHP. The version of Maia Mailguard installed on the remote host fails to sanitize user input to the 'lang' parameter before using it to include PHP code in 'login.php'. Regardless of PHP's 'registerglobals'...

ServerView Servername Parameter Arbitrary Command Execution

The remote host is running ServerView, a web-based suite of asset management tools. The version of ServerView installed on the remote host fails to sanitize user-supplied input to the 'Servername' parameter of the 'SnmpView/SnmpListMibValues' script before using it to execute a shell command. An...

Symantec Ghost Solution Locate Server Detection

The remote host is running the 'locate' service of Symantec Ghost solution, an OS deployment and management solution. This service is used by clients to discover management servers or to test if the main server is alive. C Tenable Network Security, Inc. include"compat.inc"; if description...

MS07-033: Cumulative Security Update for Internet Explorer (933566)

The remote host is missing IE Cumulative Security Update 933566. The remote version of IE is affected by several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25486; scriptversion"1.37"...

Yahoo! Messenger Webcam ActiveX Buffer Overflows

The remote host contains the 'Webcam' ActiveX controls included with Yahoo! Messenger. The version of at least one of these controls on the remote host has a buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web page, this issue could be...

GLSA-200706-01 : libexif: Integer overflow vulnerability

The remote host is affected by the vulnerability described in GLSA-200706-01 libexif: Integer overflow vulnerability Victor Stinner reported an integer overflow in the exifdataloaddataentry function from file exif-data.c while handling Exif data. Impact : An attacker could entice a user to proces...

SUSE-SA:2007:023: OpenOffice_org,libwpd

The remote host is missing the patch for the advisory SUSE-SA:2007:023 OpenOfficeorg,libwpd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:023 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

SUSE-SA:2007:021: kernel

The remote host is missing the patch for the advisory SUSE-SA:2007:021 kernel. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:021 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

SUSE-SA:2007:026: clamav

The remote host is missing the patch for the advisory SUSE-SA:2007:026 clamav. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:026 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

SUSE-SA:2007:031: samba

The remote host is missing the patch for the advisory SUSE-SA:2007:031 samba. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:031 if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc';...

Quicktime Multiple Vulnerabilities (Mac OS X 7.1.6 Security Update)

According to its version, the installation of Quicktime on the remote Mac OS X host that contains a bug which might allow a rogue Java program to write anywhere in the heap. An attacker may be able to leverage these issues to execute arbitrary code on the remote host by luring a victim into...