DCN HELLO detection

The remote host is running HELLO, an obsolete routing protocol. If possible, this IP protocol should be disabled. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. See RFC 831 & gated source hello.h http://www.zvon.org/tmRFC/RFC891/Output/chapter2.html include'deprecatednasllevel.inc';...

EGP Detection

The remote host is running EGP, an obsolete routing protocol. If possible, this IP protocol should be disabled. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. See RFC 827 & RFC 888 include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid11908; scriptversion"1.19";...

BGP Service Detection

The remote host is running BGP, a popular routing protocol. This indicates that the remote host is probably a network router. C Tenable Network Security, Inc. See RFC 1771 include"compat.inc"; ifdescription scriptid11907; scriptversion "1.13"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"B...

Microsoft IIS ODBC Tool getdrvrs.exe DSN Creation

ODBC tools are present on the remote host. ODBC tools could allow a malicious user to hijack and redirect ODBC traffic, obtain SQL user names and passwords or write files to the local drive of a vulnerable server. Example: http://www.example.com/scripts/tools/getdrvrs.exe %NASLMINLEVEL 70300 This...

FsSniffer Backdoor Detection

This host appears to be running FsSniffer on this port. FsSniffer is backdoor which allows an intruder to steal PoP3/FTP and other passwords you use on your system. An attacker may use it to steal your passwords. This script was written by Joseph Mlodzianowski Changes by Tenable: - Revised plugin...

Solaris sadmind AUTH_SYS Credential Remote Command Execution

The remote host is running the sadmind RPC service. It is possible to misuse this service to execute arbitrary commands on this host as root. C Tenable Network Security, Inc. Greatly improved by H D Moore include"compat.inc"; if description scriptid11841; scriptversion"1.34"; scriptcvsdate"Date:...

MS03-039 Exploitation Backdoor Account Detection

It was possible to log into the remote host with the login 'e' and the password 'asd321'. A widely available exploit, using one of the vulnerabilities described in the Microsoft Bulletin MS03-039 creates such an account. This probably means that the remote host has been compromised by the use of...

MS03-034: Flaw in NetBIOS Could Lead to Information Disclosure (824105) (uncredentialed check)

The remote host is running a version of the NetBT name service that suffers from a memory disclosure problem. An attacker may send a special packet to the remote NetBT name service, and the reply will contain random arbitrary data from the remote host memory. This arbitrary data may be a fragment...

Postfix < 2.0 Multiple Vulnerabilities

The remote host is running a version of Postfix that is as old as or older than 1.1.12. There are two vulnerabilities in this version that could allow an attacker to remotely disable it, or to be used as a DDoS agent against arbitrary hosts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

MS Blaster Worm (msblast.exe) Infection Detection

The remote host seems to be infected by the MS Blaster worm, or the Nachi worm, which may make this host attack random hosts on the internet. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11818; scriptversion"1.28"; scriptcvsdate"Date: 2018/11/15 20:50:28";...

MS03-021: Windows Media Player Library Access (819639)

An ActiveX control included with Windows Media Player 9 Series may allow a rogue website to gain information about the remote host. An attacker could exploit this flaw to execute arbitrary code on this host with the privileges of the user running Windows Media Player. To exploit this flaw, an...

RADIUS Server Detection

The remote host is running a RADIUS server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11738; scriptversion"1.26"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"RADIUS Server Detection"; scriptsetattributeattribute:"synopsis", value:"The remote host is...

FakeBO format satring bug

Format string bug during syslog call with remote host name...

Bugbear.B Web Backdoor Detection

Your system seems to be infected by the Bugbear.B virus its backdoor has been detected on port 81. C 2003 StrongHoldNet Licence : GPL v2 Modifications by rd: - Try every web server, not just port 81 UNTESTED include"compat.inc"; if description scriptid11707; scriptversion "1.11";...

Cisco IDS Device Manager Detection

This host is running the Cisco IDS device manager. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11689; scriptversion "1.16"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Cisco IDS Device Manager Detection"; scriptsummaryenglish:"Cisco IDS Management Web Serve...

ST FTP Service Arbitrary File/Directory Access

The remote FTP server is vulnerable to a flaw that allows users to access files that are outside the FTP server root. An attacker may break out of his FTP jail by issuing the command : CWD C: TRUSTED...

Microsoft Media Services ISAPI nsiislog.dll Multiple Overflows

Some versions of IIS shipped with a default file, nsiislog.dll, within the /scripts directory. Nessus has determined that the remote host has the file installed. The NSIISLOG.dll CGI may allow an attacker to execute arbitrary commands on this host, through a buffer overflow. C Tenable Network...

Lovgate Virus Detection

The remote host seems to be infected with the 'lovgate' virus which opens a command prompt shell on this port. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11633; scriptversion "1.13"; scriptcvsdate"Date: 2019/11/25"; scriptnameenglish:"Lovgate Virus Detection";...

ttforum Multiple Vulnerabilities

The remote host is running ttforum. This set of CGI is vulnerable to various attacks which may allow an attacker to execute arbitrary code on this host or gain administrative privileges on this forum. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: 9 May 2003 16:58:36 -0000 From:...

phPay admin/phpinfo.php Information Disclosure

The remote host is running phPay, an online shop management system. This package contains multiple information leakages that could allow an attacker to obtain the physical path of the installation on the remote host or even the exact version of the components used by the remote host by using the...