Flash Player swf Processing Multiple Unspecified Code Execution (APSB06-03)

According to its version number, the instance of Flash Player on the remote Windows host contains multiple critical and as-yet unspecified vulnerabilities that could allow an attacker to take control of the affected host. To exploit these issues, a user must load a malicious SWF file in Flash...

RaidenHTTPD Crafted Request Script Source Disclosure

The remote host is running RaidenHTTPD, a web server for Windows. According to its banner, the version of RaidenHTTPD installed on the remote Windows host fails to properly validate filename extensions in URLs. A remote attacker may be able to leverage this issue to disclose the source of scripts...

SeaMonkey < 1.0 Multiple Vulnerabilities

The remote Windows host is using SeaMonkey, an alternative web browser and application suite. The installed version of SeaMonkey contains various security issues, some of which can be exploited to execute arbitrary code on the affected host subject to the user's privileges. C Tenable Network...

BitTornado Detection

BitTornado is installed on the remote Windows host. BitTornado is a peer-to-peer file sharing application that supports the BitTorrent protocol. Make sure the use of this program fits with your corporate security policy. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Vuze Installed

Vuze formerly Azureus, peer-to-peer file sharing software, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20844; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24";...

Firefox < 1.5.0.1 Multiple Vulnerabilities

The remote Windows host is using Firefox, an alternative web browser. The installed version of Firefox contains various security issues, some of which can be exploited to execute arbitrary code on the affected host subject to the user's privileges. C Tenable Network Security, Inc...

BitTorrent Installed

BitTorrent, peer-to-peer file sharing software, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20843; scriptversion"1.22"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"BitTorrent...

Rhapsody Detection

Rhapsody is installed on the remote Windows host. Rhapsody is a music service and media player from RealNetworks. Make sure the use of this program fits with your corporate security policy. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18559; scriptversion"1.12";...

DameWare NT Utilities Authentication Credentials Persistence Weakness

According to its version number, the copy of DameWare NT Utilities installed on the remote host allows a local user to recover authentication credentials because it stores sensitive information such as username, password, remote user, and remote hostname in memory as plaintext. C Tenable Network...

DC++ Download Drive Arbitrary File Appending

According to its version number, the DC++ client installed on the remote host is affected by a vulnerability that may let a remote user append data to files anywhere on the drive on which DC++ is installed. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18012;...

DC++ Detection

DC++ is installed on the remote host. DC++ is an open source client for the Direct Connect peer-to-peer file-sharing protocol and may not be suitable for use in a business environment. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18016; scriptversion"1.10";...

Sun Java Applet Invocation Version Specification

The remote version of Windows contains a version of the Java JRE that is older than 1.4.206 / 1.3.113. Even if a newer version of this software is installed, a malicious Java applet may invoke a particular version of the Java JRE to be executed with. As a result, a rogue Java applet could exploit...

w32.spybot.fcd Worm Infection Detection

The remote system is infected with a variant of the worm w32.spybot.fcd. Infected systems will scan systems that are vulnerable in the same subnet in order to spread, creating a botnet that has been used for purposes such as DDoS attacks. This script was written by Jorge E Rodriguez - check the...

MS04-007: ASN.1 Vulnerability Could Allow Code Execution (828028) (uncredentialed check) (NTLM)

The remote Windows host has an ASN.1 library that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted ASN.1 encoded packet with improperly advertised lengths. This particular check sent a malformed NTLM packet an...

MS04-007: ASN.1 parsing vulnerability (828028)

The remote Windows host has a ASN.1 library that is vulnerable to a flaw that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a specially crafted ASN.1 encoded packet either an IPsec session negotiation, or an HTTPS request with...

Free Community Detection

Free Community is installed on the remote host. This is an adware program that monitors web traffic, and replaces banner advertisements with advertisements of its choosing. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12014; scriptversion"1.15";...

Yahoo Messenger Detection

Yahoo Messenger is running on this machine and listening on this port. It allows a user to chat and share files with remote entities. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11993; scriptversion"$Revision: 1.12 $"; scriptcvsdate"$Date: 2012/02/17 13:05:00 $";...

Shareaza Detection

Shareaza is installed on the remote host. Shareaza is an open source peer-to-peer file sharing application for Windows and, as such, may not be suitable for use in a business environment. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; i...

Microsoft Windows SMB Registry : Dial-In Enabled

Dial-in access is enabled on the remote Windows host. Provided a modem is installed, attackers may be able to dial into this host, bypassing firewall restrictions, and gaining access to the internal network. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid11458;...

Microsoft Windows SMB Registry : Winlogon Cached Password Weakness

The registry key 'HKLM\Software\Microsoft\WindowsNT\CurrentVersion\ Winlogon\CachedLogonsCount' is not 0. Using a value greater than 0 for the CachedLogonsCount key indicates that the remote Windows host locally caches the passwords of the users when they login, in order to continue to allow the...