Zeus/Zbot Banking Trojan/Data Theft (credentialed check)

The remote Windows host has files that indicate that the Zeus also known as Zbot banking trojan has been installed, or that stolen data collected by this trojan remains on the system. The Zeus trojan will intercept and log activity related to online banking, as well as other logins, such as web,...

Skype skype: URI Handling /Datapath Argument Injection Settings Manipulation (credentialed check)

According to its timestamp, the version of Skype installed on the remote Windows host fails to sanitize input in its URI handler to its '/Datapath' argument, which specifies the location of the Skype configuration files and security policy. If an attacker can trick a user on the affected system...

Safari < 4.0.5 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 4.0.5. It thus is potentially affected by several issues : - A buffer underflow in ImageIO's handling of TIFF images could lead to a crash or arbitrary code execution. CVE-2009-2285 - An integer overflow in the handling of...

CSS Web Installer CSSWEBLib.Installer ActiveX InstallProduct1 Method Overflow

The CSS Web Installer ActiveX control, a component of the Authentium Command On Demand virus scanner, installed on the remote Windows host reportedly is affected by a buffer overflow involving the 'InstallProduct1' method, and possibly the 'InstallProduct' and 'InstallProduct2' methods as well. I...

Symantec IM Manager Detection

Symantec IM Manager, used to manage instant messaging traffic, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid45017; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Flash Player < 10.0.45.2 Multiple Vulnerabilities (APSB10-06)

The remote Windows host contains a version of Adobe Flash Player that is earlier than 10.0.45.2. Such versions are potentially affected by multiple vulnerabilities : - An issue that could subvert the domain sandbox and make unauthorized cross-domain requests. CVE-2010-0186 - An unspecified denial...

MS10-006: Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251)

The version of the SMB client software installed on the remote Windows host is affected by two vulnerabilities that could allow arbitrary code execution : - Improper validation of fields in SMB responses can lead to a pool corruption issue and in turn to arbitrary code execution with SYSTEM level...

Netbiter Config NetbiterConfig.exe Device Hostname Remote Overflow

Binary data netbiterconfighostnameoverflow.nbin...

Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)

Binary data 5256.prm...

Flash Player < 9.0.260 / 10.0.42.34 Multiple Vulnerabilities (APSB09-19)

The remote Windows host contains a version of Adobe Flash Player that is earlier than 9.0.260 or 10.0.42.34. Such versions are potentially affected by multiple vulnerabilities : - A vulnerability in the parsing of JPEG data could lead to code execution. CVE-2009-3794 - A data injection...

Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)

The remote Windows host contains a version of Adobe AIR that is earlier than 1.5.3. Such versions are potentially affected by multiple vulnerabilities : - A vulnerability in the parsing of JPEG data could lead to code execution. CVE-2009-3794 - A data injection vulnerability could lead to code...

Sun xVM VirtualBox Guest Additions < 2.0.12 / 3.0.10 Local DoS

The remote Windows host is running a version of Sun VirtualBox Guest Additions earlier than 2.0.12 or 3.0.10. Such versions are potentially affected by a local denial of service vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid42831; scriptversion"1.14";...

Hummingbird STR Service Buffer Overflow

Hummingbird STR service STRsvc.exe is installed on the remote host. It is included with EMC Documentum eRoom, OpenText Hummingbird, and OpenText Search Server. The installed version is affected by a buffer overflow vulnerability. By sending a very large packet to the Hummingbird STR service, it m...

Shockwave Player <= 11.5.1.601 Multiple Vulnerabilities (APSB09-16)

The remote Windows host contains a version of Adobe's Shockwave Player that is 11.5.1.601 or earlier. As such, it is affected by multiple issues : - An invalid index vulnerability could lead to code execution. CVE-2009-3463 - Invalid pointer vulnerabilities could lead to code execution...

MS09-057: Vulnerability in Indexing Service Could Allow Remote Code Execution (969059)

The remote host contains the ixsso.dll ActiveX control. This control is included with the Indexing Service. The version of this control installed on the remote host reportedly has an arbitrary code execution vulnerability. A remote attacker could exploit this by tricking a user into requesting a...

Altiris Altiris.AeXNSPkgDL.1 ActiveX Control DownloadAndInstall() Method Arbitrary Code Execution

The Altiris.AeXNSPkgDL.1 ActiveX control, a component of Altiris Deployment Solution, Altiris Notification Server, and Symantec Management Platform, is installed on the remote Windows host. The installed version of this control provides an unsafe method, named 'DownloadAndInstall'. If an attacker...

MS09-047: Windows Media Format Multiple Vulnerabilities (Windows Server 2003)

Binary data 5164.prm...

Cerberus FTP Server Detection

Cerberus FTP server is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40820; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Cerberus FTP Server Detection";...

Altiris Deployment Solution Server DB Manager Unauthenticated Command Execution

The remote host is running a vulnerable version of Altiris Deployment Solution Server. Authentication is not required prior to sending commands to the DB Manager service. A remote attacker could exploit this to modify or read data from the Altiris database. C Tenable Network Security, Inc...

Safari < 4.0.3 Multiple Vulnerabilities

The version of Safari installed on the remote Windows host is earlier than 4.0.3. Such versions are potentially affected by several issues : - A buffer overflow exists in the handling of EXIF metadata that ccould lead to a crash or arbitrary code execution. CVE-2009-2188 - A vulnerability in...