LimeWire Installed

LimeWire, peer-to-peer file sharing software, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11427; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"LimeWire...

Yahoo! Messenger Detection

Yahoo! Messenger, an instant-messaging application, is installed on the Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11432; scriptversion"1.27"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"Yahoo!...

ICQ Detection

ICQ is installed on the remote host. ICQ is an instant messaging client for Windows that also includes some peer-to-peer file sharing features. As such, it may not be suitable for use in a business environment. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11425;...

XoloX Detection

The remote host is using XoloX, a P2P program which might not be suitable for a business environment. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11431; scriptversion"1.16"; scriptnameenglish:"XoloX Detection"; scriptsummaryenglish:"Determines if XoloX is installed...

Potential H.323 Denial of Service

Title: NetScreen Security Alert 52020 Date: 25 November 2002 Description: Potential H.323 Denial of Service Impact: Complete Denial of Service Affected Products: All firewall/VPN appliances and systems Affected Software Releases: ScreenOS 2.8, 3.0, 3.1, 4.0 Summary: A vulnerability has been...

Predictable TCP Initial Sequence Numbers

Title: NetScreen Security Alert 51897 Date: 25 November 2002 Description: Predictable TCP Initial Sequence Numbers Impact: Circumvention of Defined Security Policies Affected Products: All firewall/VPN appliances and systems Affected Software Releases: ScreenOS 1.7, 2.6, 2.8, 3.0, 3.1, 4.0 Summar...

CSS on Microsoft Content Management Server

Hi, while doing a pen-test I found what seems a Cross Site Scriptting on Microsoft Content Management Server. On M$ words: "Microsoft® Content Management Server 2001 MSCMS is an enterprise Web content management system that enables companies to build, deploy, and maintain Internet, intranet, and...

mldonkey Detection (telnet check)

mldonkey telnet appears to be running on the remote host. mldonkey is a peer-to-peer filesharing application. This application could be used to share copyright infringing material. It could also result in the inadvertent disclosure of confidential information. C Tenable Network Security, Inc. Not...

mldonkey Detection (WWW)

The mldonkey web interface appears to be running on the remote host. mldonkey is a peer-to-peer filesharing application. This application could be used to share copyright infringing material. It could also result in the inadvertent disclosure of confidential information. %NASLMINLEVEL 70300 C...

CVE-2002-0414

KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database SPD, which could cause a Security Gateway SG that does not use Encapsulating Security Payload ESP to forward forged IPv4 packets...

Gnutella Servent Detection

The remote host is running a Gnutella 'servent', a P2P file sharing application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid10946; scriptversion"1.34"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-1999-1356

Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption LegalNoticeCaption and text LegalNoticeText in Windows NT, which could produce a legal notice that is in violation of the security policy...

CVE-1999-1356

Technical details about this CVE are not provided in the supplied documents; no affected product/version or remediation details are present. Monitor for updates.

CVE-1999-1358

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy...

NT user (who is locked changing his/her password by administrator ) can bypass the security policy and Change the password.

Hi, Our PT team found the following vulnerability in security policy implementation with NT Server and IIS 4.0. NT user who is locked changing his/her password by administrator can bypass the security policy and Change the password. Vulnerable: Microsoft Windows NT Server 4.0 + IIS 4.0 + Service...

ZoneAlarm Pro 1.0/2.x - Outbound Packet Bypass

source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard Windows protocol adapter. It is possible for a use...

VNC HTTP Server Detection

The remote host is running VNC Virtual Network Computing, which uses the RFB Remote Framebuffer protocol to provide remote access to graphical user interfaces and thus permits a console on the remote host to be displayed on another. This script was written by Georges Dagousset See the Nessus...

cfingerd Version Detection

Nessus was able to detect the version of cfingerd running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10651; scriptversion "1.13"; scriptnameenglish:"cfingerd Version Detection"; scriptsummaryenglish:"cfingerd version"; scriptsetattribute...

CVE-2000-0771

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...

CVE-2000-0771

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...