IMAP Unencrypted Cleartext Login

The remote host is running an IMAP daemon that allows cleartext logins over unencrypted connections. NOTE: Valid credentials needs to given to the settings of SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Serv-U FTP Server SITE CHMOD Command Stack Overflow Vulnerability

The remote host is running Serv-U FTP server. There is a bug in the way this server handles arguments to the SITE CHMOD requests. SPDX-FileCopyrightText: 2004 Astharot Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

RIP poisoning

It was possible to poison the remote host routing tables through the RIP protocol. SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only References:...

PHP-Nuke <= 5.2 Arbitrary File Upload Vulnerability

PHP-Nuke is prone to an arbitrary file upload vulnerability in admin.php. SPDX-FileCopyrightText: 2001 SecurITeam Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later CPE =...

Apache HTTP Server 'mod_ssl' Hook Functions Format String Vulnerability

The remote host is using a version vulnerable of modssl which is older than 2.8.19. There is a format string condition in the log functions of the remote module which may allow an attacker to execute arbitrary code on the remote host. SPDX-FileCopyrightText: 2004 David Maciejak Some text...

WackoWiki XSS

The remote host seems to be running the WackoWiki CGI suite and may be vulnerable to a remote authentication attack. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

TYPSoft directory traversal flaw

The remote host seems to be running TYPSoft FTP earlier than 0.97.5 This version is prone to directory traversal attacks. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PowerPortal Path Dislcosure

The remote host is using PowerPortal, a content management system, written in PHP. A vulnerability exists in the remote version of this product which may allow a remote attacker to cause the product to disclose the path it is installed under. An attacker may use this flaw to gain more knowledge...

Microsoft Internet Explorer 5.01, 5.5, 6.0 Cumulative Patch (890923, MS05-020)

The July 2004 Cumulative Patch for IE is not applied on the remote host. SPDX-FileCopyrightText: 2002 Michael Scheidell Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Also supersedes...

Webnews.exe Buffer Overflow Vulnerability

The remote host appears to be running WebNews, which offers web-based access to Usenet news. This CGI script suffers from a buffer overflow vulnerability. SPDX-FileCopyrightText: 2003 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

INN buffer overflow

The remote host is running INN InterNetNews. The remote version of this server does not do proper bounds checking. An attacker may exploit this issue to crash the remote service by overflowing some of the buffers by sending a maliciously formatted news article. OpenVAS Vulnerability Test $Id:...

cfengine format string vulnerability

Cfengine is running on this remote host. Cfengine contains a component, cfd, which serves as a remote-configuration client to cfengine. This version of cfd contains several flaws in the way that it calls syslog. As a result, trusted hosts and valid users if access controls are not in place can...

Ultimate PHP Board Information Leak

The remote host is running Ultimate PHP Board UPB. There is a flaw in this version which may allow an attacker to view private message board information. OpenVAS Vulnerability Test $Id: upbinfoleak.nasl 5780 2017-03-30 07:37:12Z cfi $ Description: Ultimate PHP Board Information Leak Authors: Erik...

Xedus Denial of Service

The remote host runs Xedus Peer to Peer webserver. This version is vulnerable to a denial of service. An attacker could stop the webserver accepting requests from users by establishing multiple connections from the same host. OpenVAS Vulnerability Test $Id: xedusdos.nasl 6056 2017-05-02 09:02:50Z...

Intrusion.com SecureNet sensor detection

The remote host appears to be an Intrusion.com SecureNet sensor on this port. OpenVAS Vulnerability Test $Id: securenetsensordetect.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Intrusion.com SecureNet sensor detection Authors: David Maciejak Copyright: Copyright C 2005 David Maciejak This...

Chora Detection

This script detects whether the remote host is running Chora and extracts version numbers and locations of any instances found. Chora is a PHP-based interface to CVS repositories from the Horde Project. See http://www.horde.org/chora/ for more information. OpenVAS Vulnerability Test $Id:...

RSA Security RSA Authentication Agent For Web XSS

The remote host seems to be running the RSA Security RSA Authentication Agent for web. The remote version of this software is contains an input validation flaw in the 'postdata' variable. An attacker may use it to perform a cross site scripting attack. OpenVAS Vulnerability Test $Id:...

Athena Web Registration remote command execution flaw

The remote host is running Athena Web server. The remote version of this software is vulnerable to remote command execution flaw through the athenareg.php script. A malicious user could execute arbitrary commands on the remote host. OpenVAS Vulnerability Test $Id: athenawebremotecmdexec.nasl 8023...

cfengine AuthenticationDialogue vulnerability

Cfengine is running on this remote host. cfengine cfservd is reported prone to a remote heap-based buffer overrun vulnerability. The vulnerability presents itself in the cfengine cfservd AuthenticationDialogue function. The issue exists due to a lack of sufficient boundary checks performed on...

Zeroboard flaws (2)

The remote web server contains several PHP scripts that are prone to arbitrary PHP code execution and file disclosure attacks. Description : The remote host runs Zeroboard, a web BBS application popular in Korea. The remote version of this CGI is vulnerable to multiple flaws which may allow an...