Windows Live OneCare Antivirus Detection

Windows Live OneCare antivirus, a commercial antivirus software package for Windows, is installed on the remote host; however, there is a problem with the install in that either its services are not running, or its engine and/or virus definition are out of date. %NASLMINLEVEL 999999 C Tenable...

HP LoadRunner Agent Service Detection

An HP LoadRunner Agent is listening on the remote host. This agent enables a LoadRunner Controller to communicate with the LoadRunner Load Generator on the remote host for performance testing. Note that Hewlett-Packard acquired LoadRunner in November 2006 as part of its acquisition of Mercury...

MS07-016: Cumulative Security Update for Internet Explorer (928090)

The remote host is missing the IE cumulative security update 92808. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Tenable Network Security, Inc. include"compat.inc"; if description scriptid24340;...

Advanced Poll admin/index.php Session Identifier Replay Authentication Bypass

The remote host is running Advanced Poll, a simple polling application written in PHP. The version of Advanced Poll installed on the remote host includes code to emulate PHP's 'registerglobals' functionality when that setting is disabled, which is true by default with recent versions of PHP. In...

Mac OS X Security Update 2007-001

The remote host is running a version of Mac OS X 10.3 or 10.4 which does not have Security Update 2007-001 applied. This update fixes a flaw in QuickTime which may allow a rogue website to execute arbitrary code on the remote host by exploiting an overflow in the RTSP URL handler. TRUSTED...

Fedora Core 4 : kernel-2.6.17-1.2141_FC4 (2006-769)

An update to the latest upstream stable release 2.6.17.3, which fixes a security issue with SCTP. Further details: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.2 Note that Tenable Network Security has extracted the...

CA BrightStor ARCserve Backup Tape Engine Multiple Remote Overflows (QO84983)

This host is running BrightStor ARCServe for Windows. The remote version of this software has multiple buffer overflow vulnerabilities in the Tape Engine MSRPC service. An attacker, by sending a specially crafted packet, may be able to crash the affected service or execute code on the remote host...

OmniWeb Browser < 5.5.2 Javascript alert Function Format String

Binary data 3879.prm...

phpMyFAQ < 1.6.8 Multiple Vulnerabilities

Binary data 3880.prm...

Cacti copy_cacti_user.php template_user Variable SQL Injection

The remote host is running Cacti, a web-based, front end to RRDTool for network graphing. The version of Cacti on the remote host does not properly check whether the 'copycactiuser.php' script is being run from a commandline and fails to sanitize user-supplied input before using it in database...

Yahoo! Messenger YMMAPI.YMailAttach ActiveX (ymmapi.dll) Overflow

The remote host contains a version of the 'YMailAttach' ActiveX control included with Yahoo! Messenger. The version of this ActiveX control on the remote host reportedly has an unspecified buffer overflow. If an attacker can trick a user on the affected host into visiting a specially crafted web...

MS06-072: Cumulative Security Update for Internet Explorer (925454)

The remote host is missing the IE cumulative security update 925454. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Note that Microsoft has re-released this hotfix as its initial version contained a buffer overflo...

Adobe Reader < 8.0 AcroPDF ActiveX Control Multiple Vulnerabilities

The remote host contains a version of the 'AcroPDF' ActiveX control included with Adobe Reader and Acrobat. The version of this ActiveX control on the remote host reportedly exposes several methods that fail to handle malformed arguments. If an attacker can trick a user on the affected host into...

Solaris 10 (i386) : 117550-12

The remote host is missing Sun Security Patch number 117550-12 Sun Studio 9x86: patch for Sun C++ 5.6x86 C++ Compiler. Date this patch was last updated by Sun : Wed Nov 26 05:16:44 MST 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This scrip...

GLSA-200611-18 : TIN: Multiple buffer overflows

The remote host is affected by the vulnerability described in GLSA-200611-18 TIN: Multiple buffer overflows Urs Janssen and Aleksey Salow have reported multiple buffer overflows in TIN. Additionally, the OpenPKG project has reported an allocation off-by-one flaw which can lead to a buffer overflo...

HP OpenView Storage Mirroring Server Detection

The remote host is running HP OpenView Storage Mirroring Daemon. This service is part of the HP OpenView Management suite. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid23698; scriptversion"$Revision: 1.9 $"; scriptcvsdate"$Date: 2014/08/29 21:03:42 $";...

WinZip FileView ActiveX Control Vulnerabilities

The remote host contains a version of the 'FileView' ActiveX control from Sky Software that is included in third-party products such as WinZip. The version of this ActiveX control on the remote host reportedly exposes several methods that either can be used to execute arbitrary code or are affect...

Solaris 2.5.1 (sparc) : 105710-01

The remote host is missing Sun Security Patch number 105710-01 Sun WebServer 1.0: Security and Performance international Patch. Date this patch was last updated by Sun : Wed Dec 09 17:00:00 MST 1998 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@...

Solaris 7 (sparc) : 107851-26

The remote host is missing Sun Security Patch number 107851-26 PGX32 2.1: Graphics Patch. Date this patch was last updated by Sun : Fri Jan 07 01:47:31 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...

Solaris 2.6 (i386) : 105188-18

The remote host is missing Sun Security Patch number 105188-18 SunLink X25 9.1 patchx86. Date this patch was last updated by Sun : Tue Jan 13 02:00:53 MST 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the...