6249 matches found
IMAP Service Banner Retrieval
An IMAP Internet Message Access Protocol server is installed and running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11414; scriptversion "$Revision: 1.11 $"; scriptnameenglish:"IMAP Service Banner Retrieval"; scriptcopyrightenglish:"This script...
L2TP Network Server Detection
The report host understands the L2TP tunneling protocol and appears to be a VPN endpoint, or more specifically, an L2TP Network Server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11387; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate",...
NFS Predictable Filehandles Filesystem Access
The remote NFS server might allow an attacker to guess the NFS filehandles, and therefore allow them to mount the remote filesystems without the proper authorizations. C Tenable Network Security, Inc. This is a very old flaw include"compat.inc"; if description scriptid11353; scriptversion"1.18";...
Multiple Vendor NFS CD Command Arbitrary File/Directory Access
The remote NFS server allows users to use a 'cd ..' command to access other directories besides the NFS file system. An attacker may use this flaw to read every file on this host. C Tenable Network Security, Inc. This is the implementation of an oooold attack. include 'compat.inc' ; if descriptio...
WebWho+ whois.pl time Parameter Arbitrary Command Execution
The WebWho+ CGI script appears to be installed on the remote host. This Perl script allows an attacker to view any file on the remote host as well as to execute arbitrary commands, both subject to the privileges of the web server user id. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
WU-FTPD Unspecified Security Issue
The version of WU-FTPD running on the remote host has an unspecified remote vulnerability. This is reportedly due to an unspecified bug in glob.c discovered by the SuSE security team. Nessus verified this vulnerability by looking at the banner of the remote FTP server. C Tenable Network Security,...
Nuked-Klan 1.2b Multiple Vulnerabilities
It is possible to execute arbitrary PHP code on the remote host using a flaw in the 'Nuked Klan' package. An attacker may leverage this flaw to leak information about the remote system or even execute arbitrary commands. In addition to this problem, this service is vulnerable to various cross-sit...
Default Password (D13HH[) for 'root' Account
The account 'root' has the password 'D13HH'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "D13HH"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11261;...
Unpassworded 'date' Account
The account 'date' has no password set. An attacker can leverage this to gain access to the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11248; scriptversion"1.37";...
Default Password (lrkr0x) for 'gamez' Account
The account 'gamez' has the password 'lrkr0x'. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Netowrk Security, Inc. account = "gamez"; password = "lrkr0x"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11263;...
Unpassworded 'guest' Account
The account 'guest' has no password set. An attacker may use it to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "guest"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11240; scriptversion"1.35";...
Unpassworded 'jack' Account
The account 'jack' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "jack"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11249; scriptversion"1.35";...
Unpassworded 'root' Account
The account 'root' has no password set. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11245; scriptversion"1.32"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/04/11";...
Unpassworded 'hax0r' Account
The account 'hax0r' has no password set. An attacker may use this to gain further privileges on this system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "hax0r"; include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid11253; scriptversion"1.36";...
Apache < 2.0.44 Illegal Character Default Script Mapping Bypass
The remote host appears to be running a version of Apache for Windows that is older than 2.0.44. Such versions are reportedly affected by a flaw that allows an attacker to read files that they should not have access to by appending special characters to them. C Tenable Network Security, Inc...
Savant Web Server cgitest.exe Overflow
cgitest.exe from Savant web server is installed. This CGI is vulnerable to a buffer overflow which may allow a remote attacker to crash the affected server or even run code on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. References: Date: Fri, 13 Sep 2002 19:55:05 +0000...
SNMP Agent Default Community Names
It is possible to obtain the default community names of the remote SNMP server. An attacker can use this information to gain more knowledge about the remote host or to change the configuration of the remote system if the default community allows such modifications. C Tenable Network Security, Inc...
ISC BIND named SIG Resource Server Response RR Overflow
The remote BIND server, according to its version number, is affected by the 'SIG cached RR overflow' vulnerability. An attacker may use this flaw to gain a shell on this system. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid11152; scriptversion"1.30";...
QMTP/QMQP Server Detection
A QMTP/QMQP server is running on this port. QMTP is a proposed replacement of SMTP by D.J. Bernstein. Note that Nessus only runs SMTP tests currently. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11134; scriptversion "1.15"; scriptnameenglish:"QMTP/QMQP Server...
RPC Services Enumeration
By sending a DUMP request to the portmapper, it was possible to enumerate the ONC RPC services running on the remote port. Using this information, it is possible to connect and bind to each service by sending an RPC request to the remote port. C Tenable Network Security, Inc. include"compat.inc";...