HTTP Protocol Version Detection

This script determines which version of the HTTP protocol the remote\n' 'host is speaking C Tenable Network Security, Inc. include "compat.inc"; if description scriptid10582; scriptversion"1.38"; scriptnameenglish:"HTTP Protocol Version Detection"; scriptsetattributeattribute:"synopsis",...

Solsoft NSM Format Strings RCE

The Solsoft NSM application running on the remote host is affected by multiple flaws in ulm logging related to format string processing. An unauthenticated, remote attacker can exploit these to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description...

Microsoft Windows SMB Registry : Windows 2000 Service Pack Detection

By reading the registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CSDVersion it was possible to determine the Service Pack version of the remote Windows 2000 system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10531; scriptversion"1.55";...

ipop2d fold Command Arbitrary File Access

The remote pop2 server allows the reading of arbitrary files for authenticated users, using the 'fold' command. C Tenable Network Security, Inc. Theory : - log into the remote server - fold /etc/passwd - read 1 - retr We only check the banner for this flaw include"compat.inc"; ifdescription...

MySQL Unpassworded Account Check

It is possible to connect to the remote MySQL database server using an unpassworded account. This may allow an attacker to launch further attacks against the database. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10481; scriptversion"1.62"; scriptcvsdate"Date:...

WebsitePro Remote Request Overflow

The remote web server is WebSitePro 2.5. There are remotely-exploitable buffer overflow vulnerabilities in releases of WebSitePro prior to 2.5. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid10476;...

NFS Share Export List

This plugin retrieves the list of NFS exported shares. C Tenable Network Security, Inc. include 'compat.inc' ; if description scriptid10437; scriptversion"1.36"; scriptcvsdate"Date: 2019/10/04 16:48:26"; scriptnameenglish:"NFS Share Export List"; scriptsummaryenglish:"Gets a list of exported NFS...

Microsoft Windows SMB Registry : Autologon Enabled

This script determines whether the autologon feature is enabled. This feature allows an intruder to log into the remote host as DefaultUserName with the password DefaultPassword. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10412; scriptversion"1.36";...

Microsoft Windows SMB LsaQueryInformationPolicy Function NULL Session Domain SID Enumeration

By making or emulating a call to LsaQueryInformationPolicy, it was possible to obtain the domain SID Security Identifier. The domain SID can then be used to get the list of users of the domain. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10398; scriptversion"1.59"...

Microsoft Windows SMB Shares Enumeration

By connecting to the remote host, Nessus was able to enumerate the network share names. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10395; scriptversion"1.48"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01"; scriptnameenglish:"Microsoft...

Microsoft Windows SMB Registry Remotely Accessible

It was possible to access the remote Windows Registry using the login / password combination used for the Windows local checks SMB tests. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10400; scriptversion"1.55"; scriptsetattributeattribute:"pluginmodificationdate",...

Windmail.exe Shell Metacharacter Arbitrary Command Execution

The remote host may be running WindMail as a CGI application. In this mode, some versions of the 'windmail.exe' script allow an attacker to execute arbitrary commands on the remote server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

MySQL Short Check String Authentication Bypass

The remote version of MySQL is older than or as old as version 3.22.30 or 3.23.10. Thus, it may allow attacker who knows a valid username to access database tables without a valid password. C Tenable Network Security, Inc. include 'compat.inc' ; if description scriptid10343; scriptversion"1.31";...

Talk Service (talkd, in.talk, ntalk) Detection

The remote service responded to a talk request. A talk server also known as 'talkd', 'in.talk', or 'ntalk' is a service that works over UDP and notifies a user when someone wants to initiate a conversation. Note that talk is nowadays considered by many to be obsolete. C Tenable Network Security,...

TFN (Tribe Flood Network) Trojan Detection

The remote host appears to be running TFN Tribe Flood Network, which is a Trojan Horse that can be used to control your system or make it attack another network. It is very likely that this host has been compromised C Tenable Network Security, Inc. include"compat.inc"; if description scriptid1028...

Vermillion FTPD Long CWD Commands DoS

It was possible to make the remote FTP server crash by issuing the commands : CWD CWD CWD Where is longer than 504 chars. An attacker can use this problem to prevent your FTP server from working properly, thus preventing legitimate users from using it. C Tenable Network Security, Inc...

SSH RSAREF Library Multiple Functions Local Overflow

The remote SSH server is version 1.2.27 or earlier. If this version was compiled against the RSAREF library, then it is likely to be vulnerable to a buffer overflow that a remote attacker could exploit to gain root privileges on the affected system. To determine if you compiled ssh against the...

OpenLink Web Configurator GET Request Remote Overflow

It is possible to crash the remote web server by sending overly long GET requests. An attacker may exploit this issue to crash the remote web server or execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10169;...

FTP Server Detection

It is possible to obtain the banner of the remote FTP server by connecting to a remote port. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10092; scriptversion"1.57"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/08/17";...

rexecd Service Detection

The rexecd service is running on the remote host. This service is design to allow users of a network to execute commands remotely. However, rexecd does not provide any good means of authentication, so it may be abused by an attacker to scan a third-party host. C Tenable Network Security, Inc...