phpMyAdmin < 3.3.10.1 / 3.4.1 Multiple Vulnerabilities (PMASA-2011-03 - PMASA-2011-04

The remote host contains a version of phpMyAdmin - 3.3.x less than 3.3.10.1 or 3.4.x less than 3.4.1 - that is affected by multiple vulnerabilities: - The scripts 'tbllinks.php' and 'tbl-tracking' fail to filter input to the 'table' and 'db' parameters. An attacker may be able to exploit this iss...

VNC Server Detection

Binary data 5934.prm...

Nmap NSE net: db2-das-info

Connects to the IBM DB2 Administration Server DAS on TCP or UDP port 523 and exports the server profile. No authentication is required for this request. The script will also set the port product and version if a version scan is requested. OpenVAS Vulnerability Test $Id: gbnmapdb2dasinfonet.nasl...

Nmap NSE net: dns-recursion

Checks if a DNS server allows queries for third-party names. It is expected that recursion will be enabled on your own internal nameservers. OpenVAS Vulnerability Test $Id: gbnmapdnsrecursionnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Felix Groebert...

Nmap NSE net: afp-showmount

Shows AFP shares and ACLs. SYNTAX: afp.password: The password to use for authentication. If unset, first attempt to use credentials found by 'afp-brute', then no credentials. afp.username: The username to use for authentication. If unset, first attempt to use credentials found by 'afp-brute', the...

Nmap NSE net: drda-info

Attempts to extract information from database servers supporting the DRDA protocol. The script sends a DRDA EXCSAT exchange server attributes command packet and parses the response. OpenVAS Vulnerability Test $Id: gbnmapdrdainfonet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE wrapper...

Nmap NSE net: broadcast-ms-sql-discover

Discovers Microsoft SQL servers in the same broadcast domain. SYNTAX: mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for seconds, 'm' for minutes, or 'h' for hours. Default: '30s'. OpenVAS Vulnerability Test $Id:...

Nmap NSE net: nrpe-enum

Queries Nagios Remote Plugin Executor NRPE daemons to obtain information such as load averages, process counts, logged in user information, etc. This script attempts to execute the stock list of commands that are enabled. User-supplied arguments are not supported. SYNTAX: nrpe-enum.cmds: A...

Nmap NSE net: realvnc-auth-bypass

Checks if a VNC server is vulnerable to the RealVNC authentication bypass CVE-2006-2369. OpenVAS Vulnerability Test $Id: gbnmaprealvncauthbypassnet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Brandon Enright NASL-Wrapper: autogenerated Copyright:...

Nmap NSE net: informix-tables

Retrieves a list of tables and column definitions for each database on an Informix server. SYNTAX: informix.instance: specifies the Informix instance to connect to informix-query.username: The username used for authentication informix-query.password: The password used for authentication Version 0...

Nmap NSE net: ms-sql-query

Runs a query against Microsoft SQL Server ms-sql. SYNTAX: mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for seconds, 'm' for minutes, or 'h' for hours. Default: '30s'. mssql-query.query: specifies the query to run against the server...

Nmap NSE net: snmp-brute

Attempts to find an SNMP community string by brute force guessing. SYNTAX: snmplist: The filename of a list of community strings to try. snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id:...

Nmap NSE net: pop3-brute

Tries to log into a POP3 account by guessing usernames and passwords. SYNTAX: userdb: The filename of an alternate username database. pop3loginmethod: The login method to use: ''USER'' default, ''SASL-PLAIN'', ''SASL-LOGIN'', ''SASL-CRAM-MD5'', or ''APOP''. unpwdb.passlimit: The maximum number of...

Nmap NSE net: mysql-variables

Attempts to show all variables on a MySQL server. SYNTAX: mysqluser: The username to use for authentication. If unset it attempts to use credentials found by 'mysql-brute' or 'mysql-empty-password'. mysqlpass: The password to use for authentication. If unset it attempts to use credentials found b...

Nmap NSE net: mysql-info

Connects to a MySQL server and prints information such as the protocol and version numbers, thread ID, status, capabilities, and the password salt. If service detection is performed and the server appears to be blocking our host or is blocked because of too many connections, then this script isn'...

Nmap NSE net: gopher-ls

Lists files and directories at the root of a gopher service. SYNTAX: gopher-ls.maxfiles: If set, limits the amount of files returned by the script. If set to 0 or less, all files are shown. The default value is 10. OpenVAS Vulnerability Test $Id: gbnmapgopherlsnet.nasl 5505 2017-03-07 10:00:18Z...

Nmap NSE net: imap-capabilities

Retrieves IMAP email server capabilities. IMAP4rev1 capabilities are defined in RFC 3501. The CAPABILITY command allows a client to ask a server what commands it supports and possibly any site-specific policy. OpenVAS Vulnerability Test $Id: gbnmapimapcapabilitiesnet.nasl 5505 2017-03-07 10:00:18...

Nmap NSE net: mongodb-info

Attempts to get build info and server status from a MongoDB database. OpenVAS Vulnerability Test $Id: gbnmapmongodbinfonet.nasl 5499 2017-03-06 13:06:09Z teissa $ Autogenerated NSE wrapper Authors: NSE-Script: Martin Holst Swende NASL-Wrapper: autogenerated Copyright: NSE-Script: The Nmap Securit...

Nmap NSE net: banner

A simple banner grabber which connects to an open TCP port and prints out anything sent by the listening service within five seconds. The banner will be truncated to fit into a single line, but an extra line may be printed for every increase in the level of verbosity requested on the command line...

Nmap NSE net: ms-sql-empty-password

Attempts to authenticate using an empty password for the sysadmin sa account. SYNTAX: mssql.timeout: How long to wait for SQL responses. This is a number followed by 'ms' for milliseconds, 's' for seconds, 'm' for minutes, or 'h' for hours. Default: '30s'. OpenVAS Vulnerability Test $Id:...