IBM DB2 Administration Server Detection

The remote host is running an IBM DB2 Administration Server. DB2 is an enterprise relational database management system, and the Administration Server is used by DB2 to administer databases across a network. C Tenable, Inc. include"compat.inc"; if description scriptid22016; scriptversion"1.31";...

OpenOffice < 2.0.3 Multiple Vulnerabilities

The remote host is running a version of OpenOffice.org which is older than version 2.0.3. An attacker may use this to execute arbitrary code on this host. To succeed, the attacker would have to send a rogue file to a user of the remote computer and have him open it. The file could be crafted in...

Scout Portal Toolkit SPT--ForumTopics.php forumid Parameter SQL Injection

The remote host is running Scout Portal Toolkit, an open source toolkit for organizing collections of online resources / knowledge. The version of Scout Portal Toolkit installed on the remote host fails to sanitize user-supplied input to the 'forumid' parameter to the 'SPT--ForumTopics.php' scrip...

Wikka wikka.php Local File Inclusion

The remote host is running Wikka, a lightweight, open source wiki application written in PHP. The version of Wikka installed on the remote host has a programming error in the 'Method-method' in 'wikka.php'. By leveraging this issue, an unauthenticated attacker may be able to access arbitrary PHP...

MS06-021: Cumulative Security Update for Internet Explorer (916281)

The remote host is missing the IE cumulative security update 916281. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21685;...

Rendezvous Daemon Detection

The remote host is running a Rendezvous daemon on the specified port. Rendezvous is a commercial messaging software product used for building distributed applications, and a Rendezvous daemon is the central communications component of the software. %NASLMINLEVEL 70300 C Tenable Network Security,...

WinGate < 6.1.3 POST Request Buffer Overflow

Binary data 3642.prm...

WinGate POST Request Buffer Overflow

The remote host appears to be running WinGate Proxy Server, a Windows application for managing and securing Internet access. According to its banner, the version of WinGate installed on the remote host is affected by a buffer overflow vulnerability in its HTTP proxy service. An attacker with acce...

ZipCentral ZIP File Handling Buffer Overflow

According to its version, the ZipCentral program installed on the remote host is affected by a stack-based buffer overflow when handling a ZIP file with specially crafted filenames. C Tenable Network Security include"compat.inc"; if description scriptid21620; scriptversion"1.18";...

GLSA-200605-16 : CherryPy: Directory traversal vulnerability

The remote host is affected by the vulnerability described in GLSA-200605-16 CherryPy: Directory traversal vulnerability Ivo van der Wijk discovered that the 'staticfilter' component of CherryPy fails to sanitize input correctly. Impact : An attacker could exploit this flaw to obtain arbitrary...

XOOPS xoopsConfig Parameter Variable Overwrite Local File Inclusion

The version of XOOPS installed on the remote host allows an unauthenticated attacker to skip processing of the application's 'include/common.php' script and thereby to gain control of the variables '$xoopsConfiglanguage' and '$xoopsConfigthemeset', which are used by various scripts to include PHP...

GLSA-200605-15 : Quagga Routing Suite: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200605-15 Quagga Routing Suite: Multiple vulnerabilities Konstantin V. Gavrilenko discovered two flaws in the Routing Information Protocol RIP daemon that allow the processing of RIP v1 packets carrying no authentication even when...

ACal embed/day.php path Parameter Remote File Inclusion

The remote host is running ACal, an open source, web-based event calendar written in PHP. The version of ACal installed on the remote host fails to sanitize user-supplied input to the 'path' parameter of the 'embed/day.php' script before using it in PHP 'include' functions. Provided PHP's...

VNC Security Type Enforcement Failure Remote Authentication Bypass

The version of VNC server running on the remote host is affected by the following vulnerabilities : - A flaw exists in RealVNC due to an error when handling password authentication. A remote attacker can exploit this to bypass authentication by using a specially crafted request in which the clien...

Claroline ldap.inc.php clarolineRepositorySys Parameter Remote File Inclusion

The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP. The version of Claroline installed on the remote host fails to sanitize input to the 'clarolineRepositorySys' parameter of the 'claroline/auth/extauth/drivers/ldap.inc.php' script...

GDB Server Detection

The remote host is running gdbserver, a program which can be used to run the GDB debugger on a different machine than the one which is running the program being debugged. Since gdbserver offers no authentication whatsoever, an attacker may connect to this port, change the value of the registers a...

phpWebFTP index.php language Parameter Local File Inclusion

The remote host is running phpWebFTP, a web-based FTP client written in PHP. The version of phpWebFTP installed on the remote host fails to sanitize user-supplied input to the 'language' parameter of the 'index.php' script before using it in a PHP 'include' function. An unauthenticated attacker m...

gCards < 1.46 Multiple Vulnerabilities

The remote host is running gCards, a free electronic greeting card system written in PHP. The installed version of gCards fails to sanitize user input to the 'setLang' parameter in the 'inc/setLang.php' script which is called by 'index.php'. An unauthenticated attacker may be able to exploit this...

msie-createTextRang.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

Microsoft Internet Explorer - createTextRang Remote (Metasploit)

Microsoft Internet Explorer - createTextRang Remote Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...