 The version of OpenOffice 2.x installed on the remote host is earlier than 2.4.2.  Such versions are affected by several issues : 

  - Specially crafted WMF files can lead to heap-based overflows and arbitrary code execution (CVE-2008-2237).
  - Specially crafted EMF files can lead to heap-based overflows and arbitrary code execution (CVE-2008-2238).

Trend Micro OfficeScan is installed on the remote host.  The installed version is affected by a buffer overflow vulnerability.  By sending a specially crafted HTTP request to Trend Micro OfficeScan server CGI modules, it may be possible to trigger a stack based buffer overflow.  Successful exploitation of this issue may result in arbitrary code execution on the remote system.

 The version of Trend Micro OfficeScan client running on the remote host is affected by a directory traversal issue, which can be leveraged by an unauthenticated remote attacker to read arbitrary files on the remote host.  Note that successful exploitation requires that 'Tmlisten.exe' be configured to receive updates from other clients.

 The remote host is running eDirectory, a directory service software from Novell.  The installed version of Novell eDirectory is affected by multiple heap overflows and denial of service vulnerabilities :

  - DS module is affected by two heap overflow vulnerabilities (Bugs 407275, 407256).
  - EMBOX module is affected by two denial of service vulnerabilities (Bugs 407243, 407245).

Trend Micro OfficeScan or Client Server Messaging Security is installed on the remote host.  The installed version is affected by a buffer overflow vulnerability.  By setting the parameter 'ComputerName' to a very long string in a specially crafted HTTP request, a malicious user within the local network may be able to trigger a stack-based overflow in 'cgiRecvFile.exe'.  Exploitation of this issue requires manipulation of the parameters 'TempFileName', 'NewFileSize', and 'Verify' and, if successful, would result in arbitrary code execution on the remote system.

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.5.  Mac OS X 10.5.5 contains security fixes for a number of programs.

The remote server appears to offer Microsoft Windows executables for download.

The remote host is running a MicroTik router.

This version of MicroTik router is vulnerable to a flaw within its SNMP module.  An attacker exploiting this vulnerability would send the MicroTik router malformed SNMP queries.  These queries would bypass any local 'read-only' restrictions and be executed by the router.

The remote host is running a MicroTik router. 

This version of MicroTik router is vulnerable to a flaw within its SNMP module.  An attacker exploiting this vulnerability would send the MicroTik router malformed SNMP queries.  These queries would bypass any local 'read-only' restrictions and be executed by the router.

The remote host is running eDirectory, a directory service software from Novell.  The installed version of Novell eDirectory is affected by multiple issues :

  - NDS module is affected by a heap overflow vulnerability (Bugs 396819 and 396817).
  - Windows installs of eDirectory are affected by a remote memory corruption vulnerability (Bug 373852).
  - LDAP module is affected by a buffer overflow vulnerability (Bug 373853).
  - HTTPSTK is affected by two heap overflow vulnerabilities affecting 'Language' and 'Content Length' headers in HTTPSTK (Bugs 379882 and 379880).
  - HTTPSTK is also affected by a cross-site scripting vulnerability (Bug 387429).

The remote host is running the Sharity service for Unix.  Sharity is a service that allows Unix computers to access SMB/CIFS servers.

The remote host is running Winamp, a media player for Windows.  The version of Winamp installed on the remote host is earlier than 5.541.  Such versions reportedly contain an unspecified vulnerability involving the software's 'NowPlaying' feature.

According to its version number, the Retrospect Backup Client installed on the remote host is affected by several vulnerabilities : 

  - An error in the client may lead to memory corruption and in turn a denial of service condition when processing specially-crafted packets, although only when an English client is used on a Chinese operating system, which is not a supported configuration.
  - The password hash is sent over the network unencrypted, which could result in its disclosure.
  - A null pointer dereference error may lead to a denial of service condition.

The remote client is configured to use OpenDNS DNS servers.  OpenDNS is a third-party DNS provider that offers administrators the ability to filter traffic, view network and user statistics, and more.

The remote host is running the EMC Retrospect backup client.  This host allows a server to connect and access data remotely.  This application listens on port 497/tcp for connections.

The remote host is running a Lightweight Directory Access Protocol (LDAP) server.  LDAP is a directory service that can be queried or modified remotely.

The remote host is running the Novell eDirectory LDAP server. 

The remote host is running Sun Directory.

This version is vulnerable to a flaw in the way that it handles the 'bind-dn' parameter from a client.  This may allow an attacker to gain administrative access.

The remote host is running Sun Directory.

The version of OpenOffice installed on the remote host is reportedly affected by several issues :

  - Heap overflow and arbitrary code execution vulnerabilities involving ODF text documents with XForms (CVE-2007-4770/4771).
  - Heap overflow and arbitrary code execution vulnerabilities involving Quattro Pro files (CVE-2007-5745/5747).
  - Heap overflow and arbitrary code execution vulnerabilities involving EMF files (CVE-2007-5746).
  - Heap overflow and arbitrary code execution vulnerabilities involving OLE files (CVE-2008-0320).

The remote host is an AFP Client. Apple Filing Protocol (AFP) is a service that allows network-based file sharing between machines. NNM detected the version of AFP protocol supported by the client.

The remote host is an AFP Server. Apple Filing Protocol (AFP) is a service that allows network-based file sharing between machines. NNM detected the versions of AFP protocol supported by the server.

The remote host is an AFP Server. Apple Filing Protocol (AFP) is a service that allows network-based file sharing between machines.  

The remote host is enabled and utilizing Microsoft Windows Update.  This service allows users to check for missing updates and initiate remediation via the Microsoft update site.  Depending on your individual policy, this may or may not be a desirable action.

The remote host is running the F-Secure antivirus software package.  This version of F-Secure is vulnerable to a content-parsing flaw in the way that it handles malformed files.  An attacker exploiting these flaws would be able to crash the remote firewall/antivirus software or possibly execute arbitrary code.

The version of the Altiris Client Agent (aclient) installed on the remote host is reportedly susceptible to a shatter attack that could allow a local user to elevate his or her privileges on the affected system.

The remote host is running Perforce proxy server.  Perforce is an application that is used to share files between machines.  The Perforce suite of products includes a proxy server.  This server is used for remote clients that cannot connect to the default Perforce server port.  

The remote host is running Perforce client, an application for sharing data between machines.  

The remote host is running Perforce server, an application for sharing data between machines.

The remote host is running a Borland StarTeam Server.  StarTeam is a commercial software configuration and change management tool. 

The remote host is running the WebSphere MQ software.  WebSphere MQ (formerly MQSeries) is an IBM middleware solution that allows different applications and platforms to communicate with each other.  

The remote host is running an ActivePDF server.  ActivePDF is an application server that converts different file formats to PDF.

The remote host is a Sybase Mobilink Monitor server.  The Sybase Mobilink Monitor is an application that ships with the Sybase database.  The purpose of Mobilink Monitor is to allow external machines to monitor the different server processes from a remote machine.

The remote host is a Sybase Mobilink Monitor client.  The client is configured to monitor remote Sybase database servers.

SAPlpd, a component of SAP GUI, is running on the remote host.  According to its version number, the installation of SAPlpd running on the remote host is affected by several denial of service and buffer overflow vulnerabilities.  An unauthenticated remote attacker can leverage these issues to crash the affected service or to execute arbitrary code on the affected host subject to the privileges under which it operates.

The remote SHOUTcast Server's service port is configured to use the default password to allow broadcasting content and administration.  Knowing it, an attacker can gain administrative control of the affected application.

The remote host is running a MicroTik router.

The remote host is using Winamp, a popular media player for Windows.  The version of Winamp installed on the remote Windows host reportedly contains two stack-based buffer overflows in 'in_mp3.dll' when parsing Ultravox streaming metadata that can be triggered by overly-long '<artist>' and '<name>' tag values.  If an attacker can trick a user on the affected host into opening a specially-crafted file, he may be able to leverage this issue to execute arbitrary code on the host subject to the user's privileges.

 The remote service is a netOctopus Server, the server component of the netOctopus asset management software suite.

 The remote service is a netOctopus Agent, the component of the netOctopus asset management software suite installed on individual computers. 

The remote version of Windows contains a version of SMBv2 (Server Message Block) protocol that is vulnerable to several vulnerabilities.  An attacker may exploit these flaws to elevate privileges and gain control of the remote host.

The remote host is an LDAP version 2 client. LDAP version 2 supports a NULL BIND from an LDAP client.  A NULL BIND allows the client to gain access to some portions of the directory without having to authenticate. NNM has just observed the client attempting a NULL BIND connection.

The remote host is running an LDAP version 2 client. LDAP version 2 has been deprecated.

The remote host is an LDAP client.  Improperly configured LDAP servers will allow any user to connect to the server and query for information.  NNM has noted a client that utilized a NULL LDAP bind request.

The remote host is an LDAP version 3 client. LDAP version 3 supports a method of "simple" connections which allows UserID/Password authentication where the UserID and Password are set to NULL. NNM has detected an LDAP version 3 client that utilized a bind request with a NULL UserID and Password.

The remote host is running a version of OpenOffice.org that is affected by a remote code execution flaw.  The root of the flaw appears to be the HSQLDB database engine.  An attacker exploiting this flaw would need to be able to convince a user to open a file that was handled by the OpenOffice HSQLDB database engine.  Successful exploitation would result in the attacker executing arbitrary Java code on the remote system.

The remote server is running the IBM Director.
This version of IBM Director is vulnerable to an attack against resources.  Specifically, an attacker making multiple connections to a service port can cause the system to consume high CPU and memory resources.  Successful exploitation would result in the system becoming less responsive or crashing.

The remote server is running IBM Director.

ID	Name	Severity
4727	OpenOffice < 2.4.2 WMF and EMF File Handling Buffer Overflows	medium
4724	Trend Micro OfficeScan HTTP Request Buffer Overflow	high
4716	DHCP Client Detection	info
4705	Trend Micro OfficeScan < 7.3 Build 3172 Client Traversal Arbitrary File Access	medium
4704	eDirectory < 8.7.3 SP10 FTF1 Multiple Vulnerabilities	high
4684	Trend Micro OfficeScan 'cgiRecvFile.exe' Buffer Overflow	high
4682	Mac OS X < 10.5.5 Multiple Vulnerabilities	critical
4670	Microsoft Executable Being Served	info
4644	MicroTik Router <= 2.9.51 / 3.13 SNMP Request Read-only Restriction Bypass	high
4643	MicroTik Router <= 2.9.51 / 3.13 SNMP Request Read-only Restriction Bypass	high
4641	eDirectory < 8.8 SP3 Multiple Vulnerabilities	medium
4639	Sharity Detection	info
4617	Winamp < 5.541 NowPlaying Unspecified Vulnerability	medium
4606	Retrospect Backup Client <= 7.5.116 Multiple Vulnerabilities (ESA-08-009)	medium
4602	OpenDNS Client Detection	info
4599	EMC Retrospect Backup Client Version Detection	info
4496	LDAP Version Detection	info
4495	Novell eDirectory Version Detection	info
4491	Sun Directory < 6.3 bind-dn Remote Privilege Escalation	critical
4490	Sun Directory Version Detection	info
4474	OpenOffice < 2.4 Multiple Vulnerabilities	medium
4439	AFP Client Detection	info
4438	AFP Server Detection	info
4437	AFP Server Detection	info
4433	Check for Windows Update Traffic	info
4432	F-Secure Multiple Products Unspecified Code Execution	high
4419	Altiris AClient < 6.9.164 Multiple Vulnerabilities	high
4415	Perforce Proxy Server Detection	info
4414	Perforce Client Detection	info
4413	Perforce Server Version Detection	info
4412	Borland StarTeam Server Detection	info
4410	WebSphere MQ Server Detection	info
4403	ActivePDF Server Detection	info
4393	Mobilink Monitor Server Detection	info
4392	Mobilink Monitor Client Detection	info
4388	SAPlpd < 6.29 Multiple Vulnerabilities	critical
4382	SHOUTcast Server Service Port Default Password	high
4360	MicroTik Router Version Detection	info
4359	MicroTik Router Version Detection	info
4347	Winamp < 5.52 Ultravox Streaming Metadata Parsing Buffer Overflows	medium
4343	netOctopus Server Detection (UDP)	info
4342	netOctopus Agent Detection (UDP)	info
4332	SMBv2 Remote Code Execution Vulnerability (942624)	critical
8817	LDAP Version 2 Client NULL BIND Connection	info
8816	LDAP Version 2 Client Detection	info
4317	LDAP Client Anonymous Bind Utilization	info
4316	LDAP Client Anonymous Bind Connection	info
4308	OpenOffice HSQLDB Document Handling Java Code Injection	medium
4301	IBM Director <= 5.20.1 Multiple Idle Connections DoS	medium
4300	IBM Director Version Detection	info

Detections

Analytics

Generic Family for Nessus Network Monitor

medium

high

info

medium

high

high

critical

info

high

high

medium

info

medium

medium

info

info

info

info

critical

info

medium

info

info

info

info

high

high

info

info

info

info

info

info

info

info

critical

high

info

info

medium

info

info

critical

info

info

info

info

medium

medium

info