ID

17973

Nom

Lime Wire Multiple Remote Unauthorized Access

Auteurs

This script is Copyright (C) 2005 David Maciejak

Catégorie

Misc.

Action

infos

Résumé

Checks for remote unauthorized access flaw in Lime Wire

Description

The remote host seems to be running Lime Wire, a P2P file sharing program. This version is vulnerable to remote unauthorized access flaws. An attacker can access to potentially sensitive files on the remote vulnerable host. Solution: Upgrade at least to version 4.8 Risk factor: High

POP3 Unencrypted Cleartext Logins
eStara SoftPhone Detection
Samba < 3.0.27 Multiple Vulnerabilities
CUPS < 1.3.6 process_browse_data() Function Double Free DoS
AirConnect Default Password
Shiva Integrator Default Password
XTramail control denial
Sambar Transmits Passwords in PlainText
IPSwitch IMail SMTP Buffer Overflow
Sun Java System Directory Proxy Server Unauthorized Access Vulnerability
Detect slident and or fake identd
OpenVPN Unprotected Management Interface Vulnerability
VNC Server Authentication Bypass Vulnerability
Retrospect Backup Client Multiple Vulnerabilities (ESA-08-009)
Find if IIS server allows BASIC and/or NTLM authentication
OpenSSH GSSAPI Credential Disclosure Vulnerability
OpenSSH X11 Session Hijacking Vulnerability
12Planet Chat Server ClearText Password
Xerox XRX06-005
BIND vulnerable to ZXFR bug
FlexCast Detection
Mailman Password Retrieval
IMAP Unencrypted Cleartext Logins
Samba < 3.0.30 receive_smb_raw Buffer Overflow Vulnerability
notes.ini checker
Lime Wire Multiple Remote Unauthorized Access
SAPlpd < 6.29 Multiple Vulnerabilities
OpenSSL password interception
SMC2804WBR Default Password
RealServer Memory Content Disclosure
Airport Administrative Port
TCP/IP: Chorusing
Samba NDR MS-RPC Request Heap-Based Buffer Overflow Vulnerability
NetScaler web management cookie information
Avaya P330 Stackable Switch found with default password
Enterasys Dragon Enterprise Reporting detection
Avocent KVM over IP Switch Detection
Xerox XRX08-001
HP LaserJet display hack
Retrospect Client Denial of Service Vulnerability
Proxy Web Server Cross Site Scripting
Etherleak
eStara SoftPhone SIP Packet SDP Data attribute Field Overflow
rsync modules
CUPS < 1.3.9 Multiple Vulnerabilities
Xerox WorkCentre Multi-Page Document Information Disclosure Vulnerability
Several GET locks web server
Allied Telesyn Router/Switch found with default password
SNMPc Management Server Default Credentials
Tomcat /status information disclosure
Sami HTTP Server v1.0.4
MDaemon Content Filter Directory Traversal Vulnerability
RedHat 6.2 inetd
Dovecot passdbs Argument Injection Authentication Bypass
Unreal IRCd IP cloaking weakness
Bay Networks Accelar 1200 Switch found with default password
VNC Server No Authentication Vulnerability
Cabletron Web View Administrative Access
eDirectory < 8.7.3 SP10 FTF1 Multiple Vulnerabilities (OF, DoS)
IBM AS400 and iSeries POP3 Server Remote Information Disclosure Vulnerability
Default password (0000) for user on WIP5000 IP Phone
Nortel/Bay Networks default password
Passwordless Alcatel ADSL Modem
Pocsag password
BIND vulnerable to negative cache poison bug
CUPS < 1.3.8 PNG File Handling Multiple Overflows
AttachmateWRQ Reflection for Secure IT Server < 6.0 Build 24 Multiple Vulnerabilities
Default password (admin) for Linksys Router
Trend Micro IMSS console management detection
EMC Legato Networker Multiple Vulnerabilities
ICECast AVLlib remote buffer overflow
Qpopper Insecure File Handling Vulnerabilities
Aventail ASAP detection
WinComLPD LPD Monitoring Server Authentication Bypass Vulnerability
Xerox XRX06-002
Dovecot Multiple Command Traversal Arbitrary Directory Listing
Polipo Local Web Root Restriction Bypass Vulnerability
WebLogic Server hostname disclosure
POP2 Unencrypted Cleartext Logins
Xerox XRX06-001
Trend Micro TMCM console management detection
Sun Java System Web Proxy Server Unspecified Remote Denial Of Service Vulnerability
Lighttpd Remote CGI Script Disclosure Vulnerability
Portable OpenSSH PAM timing attack
Directory Scanner
Intrusion.com SecureNet sensor detection
Xerox XRX06-006
Squid null character unauthorized access
ICECast XSS
Samba < 3.0.28 send_mailslot Buffer Overflow Vulnerability
Open X11 Server
SurgeMail IMAP Service APPEND Command Denial of Service Vulnerability
ICECast HTTP basic authorization DoS
IgnitionServer Irc operator privilege escalation vulnerability
Shiva LanRover Blank Password
Samba < 3.0.25 Multiple Vulnerabilities
Anon Proxy Server Detection
MAILsweeper Archive File Filtering Bypass
Intrusion.com SecureNet provider detection
TinyWeb 1.9
Nortel Multiple Default Accounts
Nortel Networks passwordless router (user level)
Oracle Application Server Portal 10g Authentication Bypass
FortressSSH SSH_MSG_KEXINIT Logging Remote Overflow
Firewall ECE-bit bypass
04WebServer Multiple Remote Vulnerabilities
Netscape /.perf accessible
Citrix Published Applications Remote Enumeration
WebShield Appliance detection
Passwordless HP LaserJet
CiscoWorks Management Console Detection
Resin status page accessible
StarWind Control Port Default Credentials
ICECast libshout remote buffer overflow
ZyXEL Prestige Router Configuration Reset
Netopia SNMP password disclosure flaw
irix performance copilot
Passwordless Lexmark Printer
ICMP leak
Axis Camera Default Password
AttachmateWRQ Reflection for Secure IT Server SFTP Format String Vulnerability
SheerDNS directory traversal
Motorola Vanguard with No Password
SurgeMail IMAP Server SEARCH Command Buffer Overflow Vulnerability
Macallan IMAP Server Directory Traversal Vulnerabilities
IP protocols scan
Kismet Server Information Disclosure
3Com Superstack 3 switch with default password
ISS deployment manager detection
ArGoSoft Mail Server _DUMP Command System Information Disclosure
Webserver 4D Cleartext Passwords
Airport Administrative Traffic Detection (192/udp)
List of printers is available through CUPS
RIP poisoning
Xerox XRX08-009
Passwordless Cayman DSL router
qpopper options buffer overflow
LDAP server information
BNC IRC Server Authentication Bypass Vulnerability
Nortel Networks passwordless router (manager level)
HP LaserJet direct print
Checkpoint Secure Platform detection
CUPS cups/ipp.c ippReadIO Function IPP Tag Handling Overflow
Websense reporting console detection
Identd scan
OpenSSH Reverse DNS Lookup bypass
ShareMailPro Username Identification
Allied Telesyn Router/Switch Web interface found with default password
Network daemons not managed by the package system
ICECast directory traversal flaw
Xerox XRX08-006
Default password (000000) for admin on WIP5000 IP Phone
Cheops NG without password
VNC security types
Xerox XRX07-001
Alcatel ADSL modem with firewalling off
ICECast crafted URL DoS
Fortinet Fortigate console management detection
Netgear ProSafe Router password disclosure
Clearswift MIMEsweeper manager console detection
WebWasher Classic HTTP CONNECT Unauthorized Access Weakness
HylaFAX hfaxd Password Check Vulnerability
Hobbit Monitor config Command Directory Traversal Vulnerability
Lotus Domino Detection
Asterisk SIP Remote Authentication Bypass
Xerox MicroServer Web Server Remote Denial of Service Vulnerability
Kerberos PingPong attack
Xerox MicroServer Unauthorized Access Vulnerabilities
WinComLPD LPD Monitoring Server Default Credentials
WinGate IMAP Server Directory Traversal Vulnerabilities
OpenSSH < 4.4 Multiple GSSAPI Vulnerabilities
SSH Tectia Server Host Authentication Authorization Bypass Vulnerability
Check open ports
Traceroute
POP Password Changer Unauthorized Password Change Vulnerability
DefaultNav checker
Trend Micro IWSS console management detection
NAI Management Agent leaks info
Xerox MicroServer Unauthorized Access Vulnerability
12Planet Chat Server Path Disclosure
Nortel Baystack switch password test
Attachmate Reflection for Secure IT UNIX server < 7.0 SP1 Multiple Vulnerabilities
Tektronix /ncl_items.html
Qpopper Username Information Disclosure
Firebird on Gentoo Linux /etc/conf.d/firebird Invocation ISC_PASSWORD Authentication Bypass
Netscape Messenging Server User List
Xerox WorkCentre Pro Multiple Remote Vulnerabilities
KeyServer Default Credentials
UW-IMAP CRAM-MD5 Remote Authentication Bypass Vulnerability
BlackBerry Enterprise Server / Unite! Detection
ArGoSoft Mail Server Pro IMAP RENAME Command Traversal Arbitrary Directory Creation
CUPS SNMP Back End (backend/snmp.c) asn1_get_string Function Crafted SNMP Response Remote Overflow
JigSaw < 2.2.4
Nortel/Bay Networks/Xylogics Annex default password
WebLogic Certificates Spoofing
Samba < 3.0.24 Multiple Flaws
SSH Tectia Server SFTP Format String Vulnerability
ICECast remote buffer overflow
NetworkActive Web Server Overflow
Samba Machine Trust Account Local Information Disclosure Vulnerability
Intellipeer POP3 server user account enumeration
MikroTik RouterOS with Blank Password
eDirectory eMBox Utility Unauthorized Access (remote check)
Squid < 2.5.STABLE8 Multiple Vulnerabilities
Default password (changeme) for SHOUTcast Server Service Port
Default password router Pirelli AGE mB
Cayman DSL router one char login
4D WebStar Symbolic Link Vulnerability
eDirectory < 8.8 SP3 Multiple Vulnerabilities (OF, XSS, MC)
Xerox MicroServer Web Server Multiple Vulnerabilities
Dropbear SSH privilege escalation
INN buffer overflow
Embedded Web Server Detection
Record route
F5 BIG-IP web management interface version
Xerox DocuCentre / WorkCentre Postscript Directory Traversal Vulnerability
Firebird Default Credentials
HylaFAX Remote Access Control Bypass Vulnerability
Squid Proxy Set-Cookie Headers Information Disclosure Vulnerability
Squid Proxy Failed DNS Lookup Random Error Messages
Cisco 675 passwordless router
CUPS < 1.3.7 Multiple Vulnerabilities (Overflow, Info Disc)
hp jetdirect vulnerabilities
SunOne Web Proxy Unspecified Remote Buffer Overflows
Zyxel Router Default Password Present
VMware Guest
MagniComp SysInfo Agent Accessible