vpasswd.cgi

The 'vpasswd.cgi' CGI is installed. Some versions do not properly check for special characters and allow a cracker to execute any command on your system. Warning : OpenVAS solely relied on the presence of this CGI, it did not determine if you specific version is vulnerable to that problem OpenVAS...

Mail relaying (thorough test)

The remote SMTP server appears to be insufficiently protected against relaying This means that spammers might be able to use your mail server to send their mails to the world. OpenVAS Vulnerability Test $Id: smtprelay2.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Mail relaying thorough te...

alya.cgi

alya.cgi is a cgi backdoor distributed with multiple rootkits. OpenVAS Vulnerability Test $Id: alya.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: alya.cgi Authors: Jason Lidow Copyright: Copyright C 2002 Jason Lidow This program is free software; you can redistribute it and/or modify it...

spank.c

Your machine answers to TCP packets that are coming from a multicast address. This is known as the 'spank' denial of service attack. OpenVAS Vulnerability Test $Id: spank.nasl 8145 2017-12-15 13:31:58Z cfischer $ spank.c Authors: Michel Arboi Copyright: Copyright C 2003 Michel Arboi This program ...

Veritas Backup Exec Agent 8.x9.x - Browser Overflow

Veritas Backup Exec Agent 8.x9.x - Browser Overflow / Got to give it to class101 on this one. Tested and penetrated. / str0ke / / VERITAS Backup Exec v9.1.4691.SP1 v9.1.4691.SP0 v8.5.3572 Agent Browser Service, Remote Stack Overflow Highly Critical All credits to:...

directory traversal bug in Pserv 3.0b2

Donato Ferrante Application: PSERV - the small web server http://sourceforge.net/projects/pserv Version: 3.0 beta 2 Bug: directory traversal bug Author: Donato Ferrante e-mail: [email protected] web: www.autistici.org/fdonato...

Vulnerability in WebCollection Plus (TM)

These vulnerabilities were found / tested on: WebCollection Plus TM Copyright 2001 Follett Software Company Version 5.00 Revision 12-01-A Dec 19 2001 Program protects from reading other non-webserver accessible files by checking for a : or excessive .'s in a string. If the URL has a / at the...

pam_unix_passwd.so.txt

Date: Wed, 23 Dec 1998 13:12:45 +0100 From: Michal Zalewski Reply-To: Bugtraq List To: [email protected] Subject: Linux PAM up to 0.64-2 local root compromise As someone said, "Never make any mistaeks." Latest release of Linux Pluggable Authentication Modules pam-0.64-2, as well as previous...