The version of Asterisk running on the remote host may be vulnerable to heap- and stack-buffer overflow attacks with specially crafted UDPTL packets.

Successful exploitation requires T.38 support to be enabled on the target, which is not the default, and can allow execution of arbitrary code in the context of the Asterisk server or an application crash.

The remote host has been observed using a transport layer protocol.

The remote host is running the following protocol

the remote host is running the following protocol

Versions of OpenOffice earlier than 3.3 are potentially affected by several issues :

  - Issues exist relating to PowerPoint document parsing that may lead to arbitrary code execution. (CVE-2010-2935, CVE-2010-2936)

  - A directory traversal vulnerability exists in zip / jar package extraction. (CVE-2010-3450)

  - Issues exist relating to RTF document processing that may lead to arbitrary code execution. (CVE-2010-3451, CVE-2010-3452)

  - Issues exist relating to Word document processing that may lead to arbitrary code execution. (CVE-2010-3453, CVE-2010-3454)

  - The OpenOffice.org start script and other shell scripts expand the LD_LIBRARY_PATH in a way that the current directory might be searched for libraries before /lib and /usr/lib. (CVE-2010-3689)

  - Issues exist in the third party XPDF library relating to PDf processing that may allow arbitrary code execution. (CVE-2010-3702, CVE-2010-3704)

  - OpenOffice.org includes a version of LIBXML2 that is affected by multiple vulnerabilities. (CVE-2010-4008, CVE-2010-4494)

  - An issue exists with PNG file processing that may allow arbitrary code execution. (CVE-2010-4253)

  - An issue exists with TGA file processing that may allow arbitrary code execution. (CVE-2010-4643)

The remote host has Rocket Software UniVerse installed.

Versions of UniVerse earlier than 10.3.9 are potentially affected by a remote code execution vulnerability because the application fails to properly validate a size value in a RPC packet header before using it to determine the number of bytes to receive.  A remote unauthenticated attacker, exploiting this flaw, could execute arbitrary code on the remote host with SYSTEM level privileges.

Versions of Mac OS X 10.6 earlier than 10.6.6 are potentially affected by a security issue.  Mac OS X 10.6.6 contains a security fix for the following product :

  - PackageKit

The remote host is running Winamp, a media player for Windows.

Versions of Winamp earlier than 5.601 are potentially affected by a stack buffer overflow vulnerability due to an error in the 'in_midi.dll' plugin which improperly serializes timestamps in MIDI file.  A specially crafted MIDI file can cause the application to overwrite the saved base pointer and allows execution of arbitrary code.

NetBIOS over TCP/IP (NBT, or sometimes NetBT) is a networking protocol that allows legacy computer applications relying on the NetBIOS API to be used on modern TCP/IP networks. In a response to another NBT client, the remote host has exposed various system information.

The remote host is running Zabbix, an IT monitoring service.  Versions of Zabbix earlier than 1.8.18 or 2.0.9 are contain a number of SQL injection vulnerabilities via the API and web front end. The following API methods are reported to be vulnerable:

  - alert.get: time_from, time_till;
  - event.get: object, source, eventid_from, eventid_till;
  - graphitem.get: parameter: type;
  - graph.get: parameter: type;
  - graphprototype.get: parameter: type;
  - history.get: parameter: time_from, time_till;
  - trigger.get: parameter: lastChangeSince, lastChangeTill, min_severity;
  - triggerprototype.get: parameter: min_severity;
  - usergroup.get: parameter: status

Other pages vulnerable to SQL injection include the "Dashboard", "Graphs", "Maps", "Latest data" and "Screens" pages in the "Monitoring" section. Successful attacks allow an attacker to gain access to the database and execute arbitrary SQL statements.

Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities.  Mac OS X 10.6.5 contains security fixes for the following products :

  - AFP Server

  - Apache mod_perl

  - Apache

  - AppKit

  - ATS

  - CFNetwork

  - CoreGraphics

  - CoreText

  - CUPS

  - Directory Services

  - diskdev_cmds

Disk Images

  - Flash Player plug-in

  - gzip

  - Image Capture

  - ImageIO

  - Image RAW

  - Kernel

  - MySQL

  - neon

  - Networking

  - OpenLDAP

  - OpenSSL

  - Password Server

  - PHP

  - Printing

  - python

  - QuickLook

  - QuickTime

  - Safari RSS

  - Time Machine

  - Wiki Server

  - X11

  - xar

An HTTP GET or POST request issued by the remote host has been observed.

The remote host is running Winamp, a media player for Windows. 

Versions of Winamp earlier than 5.6 are potentially affected by multiple vulnerabilities :

  - An integer overflow vulnerability exists in the 'in_nsv.dll' plugin when parsing the table of contents of a NullSoft Video (NSV) stream or file. (CVE-2010-2586)

  - A heap-base buffer overflow vulnerability exists in the 'in_midi.dll' plugin when parsing MIDI content. (CVE-2010-4370)

  - A buffer overflow vulnerability exists in the 'in_mod' plugin and is related to the comment box. (CVE-2010-4371)

  - An integer overflow vulnerability exists in the 'in_nsv plugin due to improper memory allocation for Nullsoft Video (NSV) metadata. (CVE-2010-4372)

  - An error exists in the 'in_mp4' plugin which allows remote attackers to use either crafted metadata or album art in an MP4 file to cause a denial of service. (CVE-2010-4373)

  - An error exists in the 'in_mkv' plugin which allows remote attackers to use a crafted Matroska Video (MKV) file to cause a denial of service. (CVE-2010-4374)

The remote host is running Winamp, a media player for Windows.

Versions of Winamp earlier than 5.59 build 3033 are potentially affected by multiple vulnerabilities :

  - Winamp loads libraries in an insecure manner. (CVE-2010-3137)

  - An integer overflow vulnerability exists in the 'in_mkv.dll' plugin when parsing MKV content.

  - A heap-based buffer overflow vulnerability exists in  the 'in_midi.dll' plugin when parsing MIDI content.

  - A stack-based buffer overflow vulnerability exists in the 'in_mod.dll' plugin when parsing Multitracker Module files.

  - A heap-based buffer overflow vulnerability exists in the 'in_nsv.dll' plugin when parsing NSV content.

  - A heap-based buffer overflow vulnerability exists when parsing VP6 video content.

User-supplied parameters which a web application on the remote HTTP server accepts have been detected.

The remote HTTP server is hosting media files. 

An SSL certificate associated with the remote host has been detected.

The remote host is running Zoiper, a cross-platform VoIP solution. 

Versions of Zoiper earlier than 2.24 Library 5324 are potentially affected by a denial-of-service vulnerability because the application fails to properly handle specially crafted SIP INVITE Requests.  An attacker, exploiting this flaw, could potentially crash the affected application.

The remote SSL server has a certificate which has expired.

A QNX qconn service is listening on this port.

A QNX 'debug' service is listening on this port.

The remote host is running the VxWorks 'debug' service on port 17185/udp.

The remote host is running Winamp, a media player for Windows.  

Versions of Winamp earlier than 5.58 are potentially affected by multiple vulnerabilities :

  - A stack-based buffer overflow when loading a malformed whatsnew.txt file.

  - A stack-based buffer overflow when parsing VP6 video content.

An attacker, exploiting these flaws, can execute arbitrary code in the context of the affected application.

The remote host is running a web server and responds to queries on multiple domains.  

Versions of Mac OS X 10.6 earlier than 10.6.4 are potentially affected by multiple vulnerabilities.  Mac OS X 10.6.4 contains security fixes for the following products :

  - CUPS

  - DesktopServices

  - Flash Player plug-in

  - Folder Manager

  - Help Viewer

  - iChat

  - ImageIO

Kerberos

  - libcurl

  - Network Authorization

  - Open Directory

  - Printer Setup

  - Printing

  - Ruby

  - SMB File Server

  - SquirrelMail

  - Wiki Server

The remote host is running eDirectory, a directory service software from Novell. 

Versions of eDirectory earlier than 8.8 SP5 Patch 4 are potentially affected by multiple vulnerabilities :

  - A denial-of-service vulnerability in NDSD when handling a malformed verb. (Bug 571244)

  - A stack-based buffer overflow in the dhost module for Windows. (Bug 588883)

  - A predictable session cookie in DHOST. (Bug 586854)

The version of OpenOffice installed on the remote host is earlier than 3.2.1.  Such version are affected by several issues :

  - There is a TLS/SSL renegotiation vulnerability in the included third-party OpenSSL library. (CVE-2009-3555)

  - There is a python scripting vulnerability which may lead to undesired code execution when using the OpenOffice scripting IDE. (CVE-2010-0395)

The remote host was observed downloading a Group Policy file from a server.

ID	Name	Severity
5802	Asterisk main/udptl.c Buffer Overflows (AST-2011-002)	high
7043	Generic Protocol Detection	info
5778	Generic Protocol Detection	info
5777	Generic Protocol Detection (deprecated)	info
5776	Generic Protocol Detection	info
5775	Generic Protocol Detection	info
5774	Generic Protocol Detection	info
5773	Generic Protocol Detection	info
5772	Generic Protocol Detection	info
5771	Generic Protocol Detection (deprecated)	info
5770	Generic Protocol Detection	info
5769	Generic Protocol Detection	info
5768	Generic Protocol Detection	info
5767	Generic Protocol Detection	info
5766	Generic Protocol Detection	info
5765	Generic Protocol Detection	info
5764	Generic Protocol Detection	info
5763	Generic Protocol Detection	info
5762	Generic Protocol Detection	info
5761	Generic Protocol Detection (deprecated)	info
5760	Generic Protocol Detection	info
5759	Generic Protocol Detection	info
5745	OpenOffice < 3.3 Multiple Vulnerabilities	high
5741	Rocket Software UniVerse < 10.3.9 Remote Code Execution Vulnerability	critical
5739	Mac OS X 10.6 < 10.6.6 Multiple Vulnerabilities	medium
5726	Winamp < 5.601 MIDI Timestamp Stack Buffer Overflow	medium
7240	NetBios Host Information	info
8049	Zabbix < 1.8.18 / 2.0.9 Multiple SQL Injection Vulnerabilities	medium
5705	Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities	critical
7041	HTTP Request Detection	info
5717	Winamp < 5.60 Multiple Vulnerabilities	medium
5689	Winamp < 5.59 Build 3033 Multiple Vulnerabilities	medium
5688	LDAP Server Detection	info
5687	XMPP Client Detection	info
7040	HTTP Parameter Detection (deprecated)	info
7039	HTTP Hosted Media File Detection	info
7038	SSL Certificate Detection (deprecated)	info
5630	Zoiper < 2.24 SIP INVITE Request Remote DoS	medium
7036	SSL Expired Certificate Detection	medium
5639	QNX qconn Service Detection	info
5638	QNX 'debug' Service Detection	info
5621	VxWorks 'debug' Port Detection	info
5620	SSL Server Certificate Exchange Detection	info
5597	Winamp < 5.58 Multiple Vulnerabilities	medium
7033	Web Server Virtual Host Detection (Realtime Alert)	info
7034	Web Server Virtual Host Detection	info
5571	Mac OS X 10.6 < 10.6.4 Multiple Vulnerabilities	critical
5570	Novell eDirectory < 8.8 SP5 Patch 4 Multiple Vulnerabilities	medium
5564	OpenOffice < 3.2.1 Multiple Vulnerabilities	medium
7032	Microsoft Group Policy Client Download Detection	info

Detections

Analytics

Generic Family for Nessus Network Monitor

high

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

high

critical

medium

medium

info

medium

critical

info

medium

medium

info

info

info

info

info

medium

medium

info

info

info

info

medium

info

info

critical

medium

medium

info