HTTP Reverse Proxy Detection (Deprecated)

This web server is reachable through a reverse HTTP proxy. Note: This plugin has been deprecated. @DEPRECATED@ C Tenable Network Security, Inc. HTTP/1.1 is defined by RFC 2068 Check for proxy on the way transparent or reverse?! include"compat.inc"; ifdescription scriptid11040; scriptversion "1.37...

Linux lpd DVI Print Filter (dvips) Remote Command Execution

The remote lpd server calls dvips in insecure mode. An attacker may use this flaw to execute arbitrary commands remotely on this host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11023; scriptversion "1.24"; scriptcvsdate"Date: 2019/03/06 18:38:55";...

Windows 98 FTP MS/DOS Device Name Request DoS

It was possible to freeze or reboot Windows by reading a MS/DOS device through FTP, using a file name like CON\CON, AUX.htm, or AUX. An attacker may use this flaw to continuously crash the affected host, preventing users from working properly. C Tenable Network Security, Inc. Script audit and...

Microsoft Windows - Local Users Information : Never Changed Passwords

Using the supplied credentials, Nessus was able to list local users who have never changed their passwords. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10914; scriptversion"1.22"; scriptcvsdate"Date: 2019/07/08 10:52:29"; scriptnameenglish:"Microsoft Windows - Loc...

Microsoft Windows - Users Information : User Has Never Logged In

Using the supplied credentials, Nessus was able to list users who have never logged into their accounts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10899; scriptversion"1.20"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users...

SSH Protocol Version 1 Session Key Retrieval

The remote SSH daemon supports connections made using the version 1.33 and/or 1.5 of the SSH protocol. These protocols are not completely cryptographically safe so they should not be used. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10882; scriptversion"1.37";...

Multiple Vendor Malformed SNMP Trap Handling DoS

It was possible to disable the remote SNMP daemon by sending a malformed packet advertising bogus length fields. An attacker may use this flaw to prevent you from using SNMP to administer your network or use other flaws to execute arbitrary code with the privileges of the SNMP daemon. C Tenable...

UPnP Client Detection

This machine answered to a unicast UPnP NOTIFY packet by trying to fetch the XML description that Nessus advertised. This script was written by John [email protected] Changes by Tenable: - Revised plugin title 9/8/09 include"compat.inc"; ifdescription scriptid10829; scriptversion"1.26"...

SysV /bin/login Environment Remote Overflow (rlogin)

The remote /bin/login seems to crash when it receives too many environment variables. This is likely due to a buffer overflow vulnerability which might allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid1082...

Solaris in.fingerd Unused Accounts Disclosure

The remote Solaris finger daemon will return a list of accounts that have never been used when it receives the request : finger 'a b c d e f g h'@target A remote attacker could use this information to guess which operating system is running, or to mount further attacks on these accounts. C Tenabl...

MBDMS Database Server Long String Remote Overflow

According to its banner, the remote host is running a beta version of MDBMS. It is very likely this version has a remote buffer overflow vulnerability. A remote attacker could exploit this to crash the service, or execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if...

Generic Overflow Detection

It was possible to crash the remote service by flooding it with too much data. An attacker may use this flaw to make this service crash continuously, preventing this service from working properly. It may also be possible to exploit this flaw to execute arbitrary code on this host. C Tenable Netwo...

ISC BIND 9.x AUTHORS Map Remote Version Disclosure

It was possible to determine that the remote name server is running BIND 9.x by querying it for the AUTHORS map. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10728; scriptversion "$Revision: 1.20 $"; scriptcvsdate"$Date: 2011/08/16 21:07:11 $"; scriptnameenglish:"I...

NetCode NC Book book.cgi current Parameter Arbitrary Command Execution

The CGI 'book.cgi' is installed. This CGI has a well known security flaw that lets an attacker execute arbitrary commands with the privileges of the http daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10721; scriptversion"1.27";...

Zope ZClass Modification Local DoS

The remote web server is Zope 2.2.5. Such versions allow any Zope user to create a denial of service by modifying Zope data structures, thus rendering the site unusable. Since Nessus solely relied on the version number of the server, consider this a false positive if the hotfix has already been...

PerlCal cal_make.pl p0 Parameter Traversal Arbitrary File Read

The 'calmake.pl' cgi is installed on the remote host. This CGI has a well known security flaw that lets anyone read arbitrary files with the privileges of the http daemon root or nobody. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

PHP-Nuke opendir.php Traversal Arbitrary File Read

The remote host has the CGI 'opendir.php' installed. This CGI allows anyone to read arbitrary files with the privileges of the HTTP server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid10655; scriptversion"1.26"...

SEDUM HTTP Server Long HTTP Request Overflow DoS

It was possible to make the remote web server crash by sending it too much data. An attacker may use this flaw to prevent this host from fulfilling its role. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10637; scriptversion"1.25"; scriptcvsdate"Date: 2018/07/27...

MS00-086: Webserver file request parsing (277873)

The hotfix for the 'Webserver file request parsing' problem has not been applied. This vulnerability can allow an attacker to execute arbitrary commands through the remote IIS server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10632; scriptversion"1.47";...

ISC BIND < 4.9.8 / 8.2.3 Multiple Remote Overflows

The remote BIND server, according to its version number, is affected by various buffer overflow vulnerabilities that may allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10605; scriptversion"1.29";...