CSS on Microsoft Content Management Server

Hi, while doing a pen-test I found what seems a Cross Site Scriptting on Microsoft Content Management Server. On M$ words: "Microsoft® Content Management Server 2001 MSCMS is an enterprise Web content management system that enables companies to build, deploy, and maintain Internet, intranet, and...

mldonkey Detection (telnet check)

mldonkey telnet appears to be running on the remote host. mldonkey is a peer-to-peer filesharing application. This application could be used to share copyright infringing material. It could also result in the inadvertent disclosure of confidential information. C Tenable Network Security, Inc. Not...

mldonkey Detection (WWW)

The mldonkey web interface appears to be running on the remote host. mldonkey is a peer-to-peer filesharing application. This application could be used to share copyright infringing material. It could also result in the inadvertent disclosure of confidential information. %NASLMINLEVEL 70300 C...

CVE-2002-0414

KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database SPD, which could cause a Security Gateway SG that does not use Encapsulating Security Payload ESP to forward forged IPv4 packets...

Gnutella Servent Detection

The remote host is running a Gnutella 'servent', a P2P file sharing application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid10946; scriptversion"1.34"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-1999-1356

Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption LegalNoticeCaption and text LegalNoticeText in Windows NT, which could produce a legal notice that is in violation of the security policy...

CVE-1999-1356

Technical details about this CVE are not provided in the supplied documents; no affected product/version or remediation details are present. Monitor for updates.

CVE-1999-1358

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy...

CVE-1999-1356: Undefined Security Weakness

Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption LegalNoticeCaption and text LegalNoticeText in Windows NT, which could produce a legal notice that is in violation of the security policy...

NT user (who is locked changing his/her password by administrator ) can bypass the security policy and Change the password.

Hi, Our PT team found the following vulnerability in security policy implementation with NT Server and IIS 4.0. NT user who is locked changing his/her password by administrator can bypass the security policy and Change the password. Vulnerable: Microsoft Windows NT Server 4.0 + IIS 4.0 + Service...

ZoneAlarm Pro 1.0/2.x - Outbound Packet Bypass

source: https://www.securityfocus.com/bid/3647/info Due to a common design error, it may be possible for outbound packets to bypass packet filtering in many personal firewalls. Many of these applications only block packets created by the standard Windows protocol adapter. It is possible for a use...

VNC HTTP Server Detection

The remote host is running VNC Virtual Network Computing, which uses the RFB Remote Framebuffer protocol to provide remote access to graphical user interfaces and thus permits a console on the remote host to be displayed on another. This script was written by Georges Dagousset See the Nessus...

cfingerd Version Detection

Nessus was able to detect the version of cfingerd running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10651; scriptversion "1.13"; scriptnameenglish:"cfingerd Version Detection"; scriptsummaryenglish:"cfingerd version"; scriptsetattribute...

CVE-2000-0771

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...

CVE-2000-0771

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...

CVE-2000-0771

CVE-2000-0771 refers to a Windows 2000 vulnerability where a local user can corrupt the local security policy by processing malformed RPC traffic, described as the “Local Security Policy Corruption.” The issue is a local-privilege-consistency disruption with a documented impact of partial availab...

CVE-2000-0771: Undefined Security Weakness

Microsoft Windows 2000 allows local users to cause a denial of service by corrupting the local security policy via malformed RPC traffic, aka the "Local Security Policy Corruption" vulnerability...

[SECURITY] Security policy for Debian 2.1 (slink) (updated)

Debian is phasing out support for Debian 2.1 slink. We believe that this will have a minimal impact on our user community as we expect that most slink users have already upgraded to potato. We had originally announced that support would end Sep 30, 2000. In response to feedback to our earlier...

MS00-062: Local Security Policy Corruption (269609)

The hotfix for the 'Local Security Policy Corruption' problem has not been applied. This vulnerability allows a malicious user to corrupt parts of a Windows 2000 system's local security policy, which could prevent this host from communicating with other hosts in this domain. C Tenable Network...

Microsoft Security Bulletin (MS00-062)

Microsoft Security Bulletin MS00-062 - -------------------------------------- Patch Available for "Local Security Policy Corruption" Vulnerability Originally posted: August 28, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Windowsr 2000...