miniBB bb_func_usernfo.php Website Name Field XSS

The remote host is using the miniBB forum management system. According to its version number, this forum is vulnerable to a cross-site scripting bug. A remote attacker could exploit this to impersonate a legitimate user by tricking them into requesting a maliciously crafted URL. %NASLMINLEVEL 703...

Ebola AV Daemon < 0.1.5 Authentication Sequence Remote Overflow

According to its version number, there is a remote buffer overflow vulnerability in the authentication mechanism of the Ebola AntiVirus daemon. A remote attacker could exploit this to crash the service, or possibly execute arbitrary code. C Tenable Network Security, Inc. Ref : From: "c0wboy@0x333...

VP-ASP shopsearch SQL Injection

The remote host is running the VP-ASP CGI suite. There is a bug in this suite that could allow an attacker to force it to execute arbitrary SQL statements on the remote host. An attacker could use this flaw to gain the control of the remote website and possibly execute arbitrary commands on the...

My_eGallery < 3.1.1g Remote File Inclusion

The remote web server is hosting the 'myegallery' PostNuke module. The installed version is potentially affected by a remote file include vulnerability because the application fails to properly sanitize input to include include statements. An attacker may use this flaw to execute arbitrary code i...

TelCondex Simple Webserver Buffer Overflow

The remote TelCondex SimpleWebserver is vulnerable to a remote executable buffer overflow, due to missing length check on the referer-variable of the HTTP-header. A remote attacker could exploit this to crash the web server, or potentially execute arbitrary code. include"compat.inc"; ifdescriptio...

MERCUR Mailserver SMTP / IMAP / POP3 Servers Remote Overflows

The remote Atrium MERCUR SMTP server mail server seems to be vulnerable to a remote buffer overflow. Successful exploitation of this vulnerability would give a remote attacker administrative access to the mail server and access to potentially confidential data. The IMAP and POP3 servers are...

SQL Injection Vulnerability in FuzzyMonkey MyClassifieds SQL Version

SQL Injection Vulnerability in FuzzyMonkey MyClassifieds SQL Version 18 October 2003 Original Advisory http://www.sintelli.com/adv/sa-2003-04-myclassified.pdf Background My Classifieds SQL is a Perl/CGI/MySQL script which will quickly and easily allow the hosting of a classifieds forum on a...

Cfengine cfservd ReceiveTransaction Function Remote Overflow (intrusive check)

The remote Cfserver seems to be vulnerable to a remote buffer overflow bug. Such a bug might be exploited by an attacker to execute arbitrary code on this host, with the privileges cfservd is running with. C Tenable Network Security, Inc. script based on exploit code by kokaninATdtors.net...

Gallery index.php GALLERY_BASEDIR Parameter Remote File Inclusion

The version of Gallery hosted on the remote web server is affected by a remote file inclusion vulnerability due to the application failing to properly sanitize user-supplied input to the 'GALLERYBASEDIR' parameter of the 'index.php' script. An attacker may use this flaw to inject arbitrary code i...

SSH Communications Secure Shell vulnerable to DoS via malformed BER/DER packet

Overview SSH Communications' Secure Shell contains vulnerabilities in ASN.1 libraries that may allow remote attackers to cause a denial-of-service situation, or potentially execute arbitrary code on the server. Description SSH Communications' Secure Shell contains a vulnerability in the decoding ...

ISC BIND < 4.9.11 stub resolver (libresolv.a) DNS Response Overflow

The remote BIND 4.x server, according to its version number, is vulnerable to a buffer overflow in the DNS stub resolver library. An attacker might use this flaw to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid11857;...

MyServer 0.4.3 / 0.7 Crafted Traversal Arbitrary File Access

This web server is running MyServer See the Nessus Scripts License for details Changes by Tenable: - Revised plugin title, added VDB refs, changed family 4/20/009 include"compat.inc"; ifdescription scriptid11851; scriptversion "1.16"; scriptcveid"CVE-2004-2516"; scriptbugtraqid11189;...

MySQL fails to validate length of password field

Overview A vulnerability in MySQL could permit a malicious user to execute arbitrary code on the system. Description MySQL is a database system. MySQL contains a buffer overflow vulnerability in the processing of the password field of the MySQL database, specifically "SET PASSWORD". A malicious...

Novell NetWare Web Server CGI2PERL.NLM PERL Handler Remote Overflow

The remote web server crashes when it receives a too long URL for the Perl handler. It might be possible to make it execute arbitrary code through this flaw. C Tenable Network Security, Inc. Vulnerable: NetWare 5.1 SP6, NetWare 6 include"compat.inc"; if description scriptid11827;...

SGI IRIX contains buffer overflow vulnerability in "cpr" program

Overview A vulnerability in cpr may allow a local attacker execute arbitrary code. Description SGI describes cpr as follows:IRIX Checkpoint and Restart CPR offers a set of user-transparent software management tools, allowing system administrators, operators, and users with suitable privileges to...

phpWebSite < 0.9.x Multiple Vulnerabilities

There are multiple flaws in the remote version of phpWebSite that may allow an attacker to gain the control of the remote database, or to disable this site entirely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Apache stops writing access/error logs after processing "Request-URI" containing "0x1A" characters

Overview A vulnerability in the logging of URI requests may permit a remote attacker to disable logging on an Apache HTTP Server. Version 1.3.27 on Windows systems is reported vulnerable to this issue. Description Apache HTTP Server 1.3.27 running on Win32 systems contains a vulnerability that...

UnrealIRCd OperServ Raw Channel Join DoS

The remote host is running a version of ircd which may crash when it receives certain raw messages. An attacker could exploit this flaw to disable this service remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11797; scriptversion "1.14"; scriptbugtraqid8131;...

Cisco IOS Malformed IPv4 Packet Remote DoS

According to its version number, the remote router or switch is running a vulnerable version of Cisco IOS. Sending a specific sequence of IPv4 packets can cause the input interface to stop accepting traffic. Note that this vulnerability does not affect devices that only use IPv6. C Tenable Networ...

Abyss Web Server GET Request Multiple Vulnerabilities

The remote Abyss Web server is earlier than version 1.1.6. Such versions are reportedly vulnerable to a buffer overflow that could be exploited by an attacker to execute arbitrary code on the host. In addition, it is possible to inject malicious data into server response headers using a specially...