FreeBSD : Buffer overflows in libmcrypt (92)

The following package needs to be updated: libmcrypt %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkgc4b7badf24ca11d882e50020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

FreeBSD Ports: phpBB < 2.0.8

The remote host has an old version of phpBB installed. phpBB is a PHP-based bulletin board. There is a cross-site scripting issue in the remote version of this software which may allow an attacker to damage the remote phpBB installation %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...

FreeBSD : Buffer overflow in Squid NTLM authentication helper (183)

The following package needs to be updated: squid %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg6f955451ba5411d8b88c000d610a3b12.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-20...

FreeBSD : ident2 double byte buffer overflow (72)

The following package needs to be updated: ident2 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg992302778fb411d88b290020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

Red Hat Enterprise Linux fixes

This plugin writes in the knowledge base the CVE ids that we know Red Hat enterprise Linux is not vulnerable to. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc"; ifdescription scriptid12512; scriptversion "$Revision: 1.11 $"; scriptcvsdate"$Date: 2011/11/03...

FreeBSD : SA-04:01.mksnap_ff

The remote host is running a version of FreeBSD which contains a bug in the mksnapffs8 utility which may reset file flags on the remote file system, thus resetting the type of access control that were assigned to a file. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

FreeBSD : libpng denial-of-service (93)

The following package needs to be updated: linux-png %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg3a408f6f9c5211d893660020ed76ef5a.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright...

Dell OpenManage Server Administrator Detection

Dell OpenManage Server Administrator OMSA, a systems management server, is running on the remote host. %NASLMINLEVEL 70300 This script was rewritten by Tenable Network Security include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid12295; scriptversion"1.23";...

Subversion < 1.0.5 svnserver svn:// Protocol Handler Remote Overflow

A remote overflow exists in Subversion. svnserver fails to validate svn:// requests resulting in a heap overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity. C Tenable Network Security, Inc. include"compat.inc"; if description...

Record Route

It is possible to obtain the traceroute to the remote host by sending packets with the 'Record Route' option set. It is a complement to traceroute. C Tenable Network Security, Inc. References: RFC 792 Internet Control Message Protocol RFC 791 Internet Protocol include"compat.inc"; ifdescription...

Web Server Reverse Proxy Detection

The remote web server seems to allow any anonymous user to use it as a reverse proxy. This may expose internal services to potential mapping and, henceforth, compromise. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid12225; scriptversion "$Revision: 1.16 $";...

Web Application Default Username ('super'/'1502') / Password ('super'/'1502') - deprecated

This plugin has been deprecated due to age and the likelihood of false positives. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/10/26. Deprecated Due to Age and likelihood of false positives. include"compat.inc"; if description scriptid12203; scriptversion"1.26";...

Web Server Incomplete Basic Authentication DoS (deprecated)

This plugin is no longer relevant, and may never have worked correctly. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2021/09/13. Deprecated by RES-74695. include"compat.inc"; ifdescription scriptid12200; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

Web Server HTTP Basic Authorization Header Remote Overflow DoS

It was possible to kill the web server by sending a request with a long basic authentication field. A remote attacker may exploit this vulnerability to make the web server crash continually or even execute arbitrary code. C Tenable Network Security, Inc. Affected: Monit include"compat.inc"; if...

vHost < 3.10r1 Unspecified XSS

The remote host is running a version of vHost that is older than 3.10r1. There is a cross-site scripting vulnerability in this version that may allow an attacker to steal the cookies of the legitimate users of this site. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

ASP Portal User Profile XSS

The remote host is running the ASP Portal CGI suite. There is a cross-site scripting issue in this suite that may allow an attacker to steal your users cookies. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid12057;...

WEBHANCER Detection

The remote host is using the WEBHANCER program. You should ensure that : - the user intended to install WEBHANCER it is sometimes silently installed - the use of WEBHANCER matches your corporate mandates and security policies. To remove this sort of software, you may wish to check out ad-aware or...

DSSAGENT Software Detection

The remote host is using the DSSAGENT program. You should ensure that: - the user intended to install DSSAGENT it is sometimes silently installed - the use of DSSAGENT matches your corporate mandates and security policies. To remove this sort of software, you may wish to check out ad-aware or...

CYDOOR Software Detection

Cydoor Desktop Media, an adware program, is installed on the remote host. This program displays pop-up/pop-under advertisements and changes web browser settings e.g., homepage without the user's permission. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12012;...

CVS pserver Crafted Module Request Arbitrary File / Directory Creation

According to its version number, the CVS server running on the remote remote host may allow an attacker to create directories and possibly files at the root of the filesystem where the CVS repository is located. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11947;...