MS09-001: Microsoft Windows SMB Vulnerabilities Remote Code Execution (958687) (uncredentialed check)

Binary data smbkb958687.nbin...

MS08-067: Vulnerability in Server Service Could Allow Remote Code Execution (958644) (ECLIPSEDWING) (uncredentialed check / IPS)

Binary data smbkb958644ips.nbin...

Apple iTunes < 8.0 Integer Buffer Overflow (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 8.0. It is, therefore, affected by an integer buffer overflow vulnerability in an included third party driver. A local user can exploit this to gain system privileges. C Tenable Network Security, Inc. include"compat.inc"; if...

Novell eDirectory eMBox Utility Unauthorized Access (uncredentialed check)

The remote host is running eDirectory, a popular directory service software from Novell. A vulnerability in the eMBox utility included with the software allows an unauthenticated attacker to access local files or cause a denial of service condition. Nessus was able to query the list of available...

MS04-042: Windows NT Multiple DHCP Vulnerabilities (885249) (uncredentialed check)

The remote host has the Windows DHCP server installed. There is a flaw in the remote version of this server that may allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20368;...

MS05-007: Vulnerability in Windows Could Allow Information Disclosure (888302) (uncredentialed check)

The remote version of Windows contains a flaw that may allow an attacker to cause it to disclose information over the use of a named pipe through a NULL session. An attacker may exploit this flaw to gain more knowledge about the remote host. C Tenable Network Security, Inc. include"compat.inc"; i...

MS04-035: WINS Code Execution (870763) (uncredentialed check)

The remote Windows Internet Naming Service WINS is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker needs to send a specially crafted packet on port 42 of the remote host. C Tenable Network Security, Inc...

MS04-031: Vulnerability NetDDE Could Allow Code Execution (841533) (uncredentialed check)

The remote version of Windows is affected by a vulnerability in Network Dynamic Data Exchange NetDDE. An attacker may exploit this flaw to execute arbitrary code on the remote host with the SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15572;...

MS04-036: Microsoft NNTP Component Remote Overflow (883935) (uncredentialed check)

The remote host is running a version of Microsoft NNTP server that is vulnerable to a buffer overflow issue. An attacker may exploit this flaw to execute arbitrary commands on the remote host with the privileges of the NNTP server process. C Tenable Network Security, Inc. include"compat.inc"; if...

MS04-022: Microsoft Windows Task Scheduler Remote Overflow (841873) (uncredentialed check)

There is a flaw in the Task Scheduler application which could allow a remote attacker to execute code remotely. There are many attack vectors for this flaw. An attacker, exploiting this flaw, would need to either have the ability to connect to the target machine or be able to coerce a local user ...

MS04-007: ASN.1 Vulnerability Could Allow Code Execution (828028) (uncredentialed check) (HTTP)

The remote Windows host has an ASN.1 library with a vulnerability that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted ASN.1 encoded packet with improperly advertised lengths. This particular check sent a...

WinMX Detection (uncredentialed check)

The remote server seems to be a WinMX Peer-to-Peer client, which may not be suitable for a business environment. C Tenable Network Security, Inc. there is already a nice WinMX check by Nessus...however, it relies on registry read access...this check works even without registry access...the anomal...

MS03-039: Microsoft RPC Interface Buffer Overrun (824146) (uncredentialed check)

The remote host is running a version of Windows that has a flaw in its RPC interface, which may allow an attacker to execute arbitrary code and gain SYSTEM privileges. An attacker or a worm could use it to gain the control of this host. Note that this is NOT the same bug as the one described in...

Microsoft Windows SMTP Service NTLM Null Session Authorization Bypass (uncredentialed check)

It is possible to authenticate to the remote SMTP service by logging in with a NULL session. An attacker may use this flaw to use your SMTP server as a spam relay. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11308; scriptversion"1.29"; scriptcvsdate"Date: 2018/11/...

MS02-045: Microsoft Windows SMB Protocol SMB_COM_TRANSACTION Packet Remote Overflow DoS (326830) (uncredentialed check)

The remote host is vulnerable to a denial of service attack in its SMB stack. An attacker may exploit this flaw to crash the remote host remotely, without any authentication. C Tenable Network Security, Inc. This script was written by Renaud Deraison Thanks to Ivan Arce who provided me with all t...

MS02-018: Microsoft IIS FTP Status Request DoS (uncredentialed check)

It was possible to make the remote FTP server crash by sending the command 'STAT ?AAAAA....AAAAA'. There is a bug in certain versions of Microsoft's FTP server that can be exploited in this fashion. Other FTP servers may also react adversely to such a string. An attacker may leverage this issue t...

MS01-026 / MS01-044: Microsoft IIS Remote Command Execution (uncredentialed check)

When IIS receives a user request to run a script, it renders the request in a decoded canonical form, and then performs security checks on the decoded request. A vulnerability results because a second, superfluous decoding pass is performed after the initial security checks are completed. Thus, a...