CVE-2005-0149

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages...

CVE-2003-1063

The patches 1 105693-13, 2 108800-02, 3 105694-13, and 4 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy...

Microsoft Windows SMB : Suspicious Software Detection

This plugin checks for the presence of files and programs which might have been installed without user consent. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid16314; scriptversion"$Revision: 1.22 $"; scriptcvsdate"$Date: 2015/10/21 20:34:21 $";...

Timbuktu Detection (TCP)

The remote service is the TCP contact port for Timbuktu, a remote control software application for Windows and Mac OS X. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid15891; scriptversion"1.18";...

MailCarrier 2.51 SMTP server Buffer Overflow [PoC included]

ABOUT : MailCarrier is a full-featured mail server with the latest security and anti-spam functions. It supports SSL communication and SMTP/POP3 authentication methods based on SASL and NTLM that do not transmit message and/or password in clear text. Many spam mails can be blocked through inquiry...

Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass

Microsoft Outlook Express 4.x5.x6.0 - Plaintext Email Security Policy Bypass source: https://www.securityfocus.com/bid/11447/info Microsoft Outlook Express is reported prone to a security policy bypass vulnerability. The vulnerability presents itself if an attached image file is referenced using ...

Microsoft Outlook 2003 - Security Policy Bypass

Microsoft Outlook 2003 - Security Policy Bypass source: https://www.securityfocus.com/bid/11446/info Microsoft Outlook 2003 is reported prone to a security policy bypass vulnerability. It is reported that by including a base64 encoded image in an email and labeling that image in a sufficient...

Microsoft Outlook Express 4.x/5.x/6.0 - Plaintext Email Security Policy Bypass

source: https://www.securityfocus.com/bid/11447/info Microsoft Outlook Express is reported prone to a security policy bypass vulnerability. The vulnerability presents itself if an attached image file is referenced using a specially crafted CID URI. This will result in a policy bypass because the...

H323 Protocol / VoIP Application Detection

H323 is a protocol used all over the Internet. It is used for Voice Over IP VoIP, Microsoft NetMeeting, and countless other applications. Nessus was able to determine that the remote device supports the H323 protocol. Make sure the use of this program is done in accordance with your corporate...

POWER SEARCH Detection

The remote host is using the POWER SEARCH program. You should ensure that : - the user intended to install POWER SEARCH it is sometimes silently installed - the use of POWER SEARCH matches your corporate mandates and security policies. To remove this sort of software, you may wish to check out...

AUREATE Software Detection

The remote host is using the AUREATE program. You should ensure that: - the user intended to install AUREATE it is sometimes silently installed - the use of AUREATE matches your corporate mandates and security policies. C Tenable Network Security, Inc. include"compat.inc"; if description...

IPINSIGHT Detection

The remote host is using the IPINSIGHT program. You should ensure that the user intended to install IPINSIGHT as it is sometimes silently installed. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12015; scriptversion"1.16";...

Yahoo Messenger Detection

Yahoo Messenger is running on this machine and listening on this port. It allows a user to chat and share files with remote entities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11993; scriptversion"$Revision: 1.12 $"; scriptcvsdate"$Date: 2012/02/17 13:05:00 $";...

TOCTOU with NT System Service Hooking

TOCTOU Time-Of-Check-to-Time-Of-Use problem is known for a while 1. Nevertheless such bugs are still not uncommon. That is more or less acceptable for general software but not for security products. I believe there are drivers that hook kernel system services by well known technique 2,3,4. Those...

IPSEC Internet Key Exchange (IKE) Version 1 Detection

The remote host seems to be enabled to do Internet Key Exchange IKE version 1. This is typically indicative of a VPN server. VPN servers are used to connect remote hosts into internal resources. Make sure that the use of this VPN endpoint is done in accordance with your corporate security policy...

CVE-2003-1063

The patches 1 105693-13, 2 108800-02, 3 105694-13, and 4 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy...

CVE-2002-0414

KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database SPD, which could cause a Security Gateway SG that does not use Encapsulating Security Payload ESP to forward forged IPv4 packets...

LimeWire Installed

LimeWire, peer-to-peer file sharing software, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11427; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"LimeWire...

Trillian Detection

Trillian is installed on the remote Windows host. Trillian is an instant messaging client for Windows. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11428; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

Yahoo! Messenger Detection

Yahoo! Messenger, an instant-messaging application, is installed on the Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11432; scriptversion"1.27"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"Yahoo!...