MS04-007: ASN.1 Vulnerability Could Allow Code Execution (828028) (uncredentialed check) (NTLM)

The remote Windows host has an ASN.1 library that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted ASN.1 encoded packet with improperly advertised lengths. This particular check sent a malformed NTLM packet an...

MS04-007: ASN.1 parsing vulnerability (828028)

The remote Windows host has a ASN.1 library that is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted ASN.1 encoded packet either an IPsec session negotiation, or an HTTPS request with...

Free Community Detection

Free Community is installed on the remote host. This is an adware program that monitors web traffic, and replaces banner advertisements with advertisements of its choosing. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12014; scriptversion"1.15";...

Yahoo Messenger Detection

Yahoo Messenger is running on this machine and listening on this port. It allows a user to chat and share files with remote entities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11993; scriptversion"$Revision: 1.12 $"; scriptcvsdate"$Date: 2012/02/17 13:05:00 $";...

Shareaza Detection

Shareaza is installed on the remote host. Shareaza is an open source peer-to-peer file sharing application for Windows and, as such, may not be suitable for use in a business environment. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; i...

Microsoft Windows SMB Registry : Winlogon Cached Password Weakness

The registry key 'HKLM\Software\Microsoft\WindowsNT\CurrentVersion\ Winlogon\CachedLogonsCount' is not 0. Using a value greater than 0 for the CachedLogonsCount key indicates that the remote Windows host locally caches the passwords of the users when they login, in order to continue to allow the...

Microsoft Windows SMB Registry : Dial-In Enabled

Dial-in access is enabled on the remote Windows host. Provided a modem is installed, attackers may be able to dial into this host, bypassing firewall restrictions, and gaining access to the internal network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11458;...

Trillian Detection

Trillian is installed on the remote Windows host. Trillian is an instant messaging client for Windows. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11428; scriptversion"1.20"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06";...

LimeWire Installed

LimeWire, peer-to-peer file sharing software, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11427; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"LimeWire...

ICQ Detection

ICQ is installed on the remote host. ICQ is an instant messaging client for Windows that also includes some peer-to-peer file sharing features. As such, it may not be suitable for use in a business environment. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11425;...

Yahoo! Messenger Detection

Yahoo! Messenger, an instant-messaging application, is installed on the Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11432; scriptversion"1.27"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptnameenglish:"Yahoo!...

Symantec pcAnywhere Detection (TCP)

Symantec pcAnywhere allows a Windows user to remotely obtain a graphical login and therefore act as a local user on the remote host. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10794; scriptversion"1.46"; scriptsetattributeattribute:"pluginmodificationdate",...

WinSATAN Backdoor Detection

WinSATAN is installed. This backdoor allows anyone to partially take control of the remote system. An attacker may use it to steal your password or prevent your system from working properly. This script was written by Julio Cesar Hernandez See the Nessus Scripts License for details Script audit a...

DeepThroat Backdoor Detection

DeepThroat is installed on the remote host. This backdoor allows anyone to perform actions such as reading files, reading the registry and executing programs. A remote attacker could use this to completely control the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...