# SID|Severity|Vulnerability Category|Vulnerability Tutorial|CVE
DNS-001|us|Vulnerable DNS Server|DNS server is vulnerable to multiple exploits|CVE-2002-0684
DNS-002|zcio|Possible Vulnerable DNS Server| Check DNS version for possible vulnerability|CVE-2002-0684

FTP-001|ycio|FTPD vulnerabilities|WU-FTPD 2.\(0-6\) vulnerabilities|CVE-2001-0187
FTP-002|us|FTPD vulnerabilities|ProFTPD pre V 1.2.x problems|CVE-1999-0911
FTP-003|ycio|FTPD vulnerabilities|ProFTPD 1.2.\(7-9\) problems|CVE-2003-0831
FTP-004|ycio|FTPD vulnerabilities|OpenBSD ftpd problems|CVE-2001-0053
FTP-005|ycio|FTPD vulnerabilities|AIX ftpd problems|CVE-2001-1557
FTP-006|ycio|FTPD vulnerabiiities|Bero ftpd problems|CVE-1999-0911
FTP-007|ycio|FTPD vulnerabilities|HP-UX ftpd problems|CVE-1999-0001
FTP-008|ycio|FTPD vulnerabilities|HP-UX ftpd problems|CVE-2001-0248
FTP-009|nr|FTPD vulnerabilities|Dot dot traversal possible|CVE-2002-1345
FTP-010|ycio|FTPD vulnerabilities|ftp server can attack other servers|CVE-1999-017

HTTP-000|zcio|Unexpected Response|Web server is either re-directed or does not issue proper 404 pages|NOCVE|
HTTP-001|ycio|Potentially Vulnerable Apache Server|Apache \(less than 1.3.27\) is vulnerable to multiple exploits|CVE-2002-2010
HTTP-002|ycio|Potentially Vulnerable Apache Server|Apache \(less than 2.0.54\) is vulnerable to multiple exploits|CVE-2003-0253|
HTTP-003|ycio|Potentially Vulnerable Sun One Server|Sun One Web Server \(less than 6.0 SP 3\) is vulnerable to buffer overflow|CVE-2003-0845|
HTTP-020|bo|Vulnerable WebDav library|Vulnerable Win32 API library|CVE-2003-0109
HTTP-021|bo|Vulnerable FrontPage \(RAD\)|Vulnerable IIS fp30reg.dll|CVE-2001-0341
HTTP-022|ycio|PHP version|PHP 4.2.\(0-1\) may be vulnerable to POST exploit|CVE-2002-0717
HTTP-023|ycio|PHP version|PHP may be vulnerable to upload exploit|CVE-2002-1798
HTTP-024|ycio|PHP version|PHP may be vulnerable to multiple exploits|CVE-2004-1019
HTTP-025|ycio|OpenSSL version|OpenSSL may be vulnerable to key manipulation|CVE-2003-0131
HTTP-026|ycio|OpenSSL version|OpenSSL may be vulnerable to symlink|CVE-2004-0975
HTTP-027|ycio|OpenSSL version|OpenSSL may be vulnerable to weak protocol|CVE-2005-2969
HTTP-028|ycio|Vulnerable web server version|WebSitePro may be vunerable to buffer overflow|CVE-2000-0623
HTTP-029|ycio|Vulnerable web server version|Netscape Enterprise Server may be vulnerable to buffer overflow|CVE-1999-0853
HTTP-030|ycio|Vulnerable web server version|iPlanet Server may be vulnerable to
buffer overflow|CVE-2002-1654
HTTP-031|ycio|Vulnerable webserver version|FastTrack server may allow root access|CVE-2000-0308
HTTP-032|ycio|Vulnerable web server version|Fast Track server may be vulnerable to buffer overlfow|CVE-1999-0853
HTTP-033|us|Vulnerable web server|RDS in MSADC is vulnerable to remote command execution|CVE-1999-1011
HTTP-100|ycio|Vulnerable CGI Script|test-cgi is active and may be vulnerable|CVE-1999-0045
HTTP-101|us|Vulnerable CGI Script|php.cgi is active and may be vulnerable|CVE-1999-0058
HTTP-102|us|Vulnerable CGI Script|phf is active and may be vulnerable|CVE-1999-0067
HTTP-103|us|Vulnerable CGI Script|m\(y\)log.phtml is active and may be vulnerable|CVE-1999-0068
HTTP-104|ycio|Vulnerable CGI Script|campas is active and may be vulnerable|CVE-1999-0146
HTTP-105|ycio|Vulnerable CGI Script|glimpse is active and may be vulnerable|CVE-1999-0147
HTTP-106|ycio|Vulnerable CGI Script|handler is active and may be vulnerable|CVE-1999-0148
HTTP-107|ycio|Vulnerable CGI Script|wrap is active and may be vulnerable|CVE-1999-0149
HTTP-108|us|Vulnerable CGI Script|webdist.cgi is active and may be vulnerable|CVE-1999-0039
HTTP-109|ycio|Vulnerable CGI Script|webgais.cgi is active and may be vulnerable|CVE-1999-0176
HTTP-110|ycio|Vulnerable CGI Script|sendmail is active and may be vulnerable|CVE-1999-0176
HTTP-111|us|Vulnerable CGI Script|faxsurvey is active and may be vulnerable|CVE-1999-0262
HTTP-112|us|Vulnerable CGI Script|htmlscript is active and may be vulnerable|CVE-1999-0264
HTTP-115|ycio|Vulnerable CGI Script|codebrws.asp is active and may allow unauthorized file aaccess|CVE-1999-0739
HTTP-116|ycio|Vulnerable CGI Script|ExprCalc.cfm is active and may allow unauthorized file access|CVE-1999-0477|
HTTP-117|us|Vulnerable CGI Script|uploader is active and may allow arbitrary file execution|CVE-1999-0177|
HTTP-118|us|Vulnerable Web Server|RDS msadc may be vulnerable to attack|CVE-1999-1011|
HTTP-119|us|FrontPage access|FrontPage author.dll is active and may allow arbitrary connections|ARC-0001|
HTTP-120|us|FrontPage access|FrontPage admin.dll is active and may allow arbitrary connections|ARC-001|
HTTP-121|us|Vulnerable IIS Web Server|command execution via directory traversal is possible|CVE-2000-0884
HTTP-122|ycio|Potentially Vulnerable IIS Web Server|Multiple IIS vulnerabilities \(HTR ASP\)|CVE-2002-0364
HTTP-123|us|Vulnerable CGI Script|Vulnerable AWStat cgi program|CVE-2002-0364
HTTP-200|ycio|Vulnerable CGI Script|newdsn.exe may allow file overwrites|CVE-1999-0191|
HTTP-201|ycio|Vulnerable CGI Script|probable IIS executable file parsing|CVE-2000-0886|
HTTP-210|ycio|Oracle Application Server problems|access to Java Process Manager anonymously is possible|CVE-2002-0563
HTTP-211|ycio|Oracle Application Server problems|access to Dynamic Monitoring Service anonymously is possible|CVE-2002-0563
HTTP-213|ycio|Oracle Application Server problems|SOAP applications may be launched by remote users|CVE-2001-1371
HTTP-214|ycio|Vulnerable CGI Script|Webgais may allow arbitrary command execution|CVE-1999-0176
HTTP-215|ycio|Vulnerable CGI Script|win-c-sample may allow arbitrary command execution|CVE-1999-0178
HTTP-216|ycio|Vulnerable CGI Script|pfdispaly allows read access to files|CVE-1999-0270
HTTP-217|ycio|Vulnerable CGI Script|piranha may allow arbitrary command execution
HTTP-218|rs|Vulnerable CGI Script|EZshopper loadpage allows reading of files|CVE-2000-1092
HTTP-219|rs|Vulnerable CGI Script|EZshopper search.cgi allows reading of files|CVE-2000-0188
HTTP-220|rs|Vulnerable CGI Script|EZshopper sojourn.cgi allows reading of files|CVE-2000-0188
HTTP-221|ycio|Vulnerable CGI Script|MachineInfo leaks sensitive information|CVE-1999-1067
HTTP-222|us|Vulnerable CGI Script|wja in JetAdmin allows reading of files|CVE-2000-0443
HTTP-223|rs|Vulnerable CGI Script|code.asp in iissamples allows reading of files|CVE-1999-0738
HTTP-224|ycio|Vulnerable CGI Script|showcode in iissamples allows reading of files|CVE-1999-0736
HTTP-225|us|Vulnerable CGI Script|hostsvc.sh in Big Brother allow reading of files|CVE-2000-0638
HTTP-226|ycio|Vulnerable CGI Script|Apache source.asp allows full file access|CVE-2000-0628
HTTP-227|us|Vulnerable CGI Script|Pollit cgi allows reading of files|CVE-2000-0590
HTTP-228|ycio|Vulnerable CGI Script|explorer.php in phpPhotoAlbum allows reading of files|CVE-2000-0872
HTTP-229|us|Vulnerable CGI Script|yapp.cgi in YaBB allows reading of files|CVE-2000-0853
HTTP-230|us|Web Configuration|PUT command is enabled|ARC-0027
HTTP-231|us|Web Configuration|PUT command is enabled|ARC-0027
HTTP-232|ycio|Vulnerable CGI Script|shop.cgi in Shopping Cart alloqs directory traversal|CVE-2000-0921
HTTP-237|rs|Web Configuration|General dot-dot folder traversal allowed|ARC-0030
HTTP-238|rs|Web Configuration|General dot-dot folder traversal allowed|ARC-0030
HTTP-239|rs|Web Configuration|General dot-dot folder traversal allowed|ARC-0030
HTTP-240|rs|Web Configuration|General dot-dot folder traversal allowed|ARC-0030
HTTP-241|rs|Vulnerable CGI Script|netauth.cgi dot-dot folder traversal allowed|CVE-2000-0782
HTTP-242|us|Vulnerable CGI Script|calendar_admin.pl allows arbitrary file execution|CVE-2000-0432
HTTP-243|ycio|Vulnerable CGI Script|codebrws.asp from iissamples allows reading of files|CVE-1999-0739
HTTP-244|ycio|Vulnerable CGI Script|exprcalc.cfm from ColdFusion allows reading of files|CVE-1999-0455
HTTP-245|ycio|Vulnerable CGI Script|redirect.exe in PDG Shopping Cart may allow arbitrary file execution|CVE-2000-0401
HTTP-246|us|Vulnerable CGI Script|Mailman vulnerability allows arbitrary file execution|CVE-2000-0401
HTTP-247|us|Vulnerable CGI Script|exampleapps in ColdFusion allows file execution|CVR-2001-0535
HTTP-248|us|Vulnerable CGI Script|Network Query Tool allows arbitrary file execution|CVE-2001-1495
HTTP-249|rs|Vulnerable CGI Script|Cisco Catalyst access is not secured|CVE-2000-0945
HTTP-250|uw|Vulnerable CGI Script|Tektronix web backdoor detected|CVE-1999-1508
HTTP-251|ycio|Vulnerable CGI Script|IIS header may be vulnerable to attack|CVE-2002-0150
HTTP-252|us|Vulnerable CGI Script|MSSQL 7 pubtext.bat allows arbitrary file execution|NOCVE
HTTP-253|us|PHP version|Directory traversal through PHP3|CVE-2001-0042
HTTP-254|ycio|CSS Weakness|CSS problem with search97cgi|CVE-2002-2151
HTTP-255|ycio|CSS Weakness|CSS problem with htdig|CVE-2002-2010
HTTP-256|ycio|CSS Weakness|CSS problem with htdig|CVE-2002-2010
HTTP-262|ycio|Vulnerable web server version|BEA WebLogic server may be vulnerable to multiple exploits|CVE-2005-4765
HTTP-263|ycio|Vulnerable web server version|BEA WebLogiv server may be vulnerable to buffer overflow|CVE-2001-0098
HTTP-265|us|Vulnerable web server|idq.dll is vulerable in MS IIS|CVE-2001-0500
HTTP-266|ycio|Vulnerable web server|IIS FrontPage \(RAD\) may be vulnerable to buffer overflow|CVE-2001-0341
HTTP-267|ycio|Vulnerable web server|IIS ISAPI may be vulnerable to buffer overflow|CVE-2001-0500
HTTP-300|ycio|Open http proxy found|proxy could be used to attack other systems|ARC-0002|
#
IMAP-001|ycio|imap version|Netscape imap version may be vulnerable|CVE-2000-0087 
#
INN-001|bo|inn version|inn vulnerable to buffer overflow|CVE-2000-0472
#
MISC-001|zcio|excessive finger information|user information available to anyone|CVE-1999-0612
MISC-002|us|remote service access|user ; with passwd ; can access service ;|ARC-0009
MISC-003|zcio|Improper login banner|Check login banners for ;|ARC-0010
MISC-004|zwoi|Doubtfull Internet service|service ; should not be on the Internet
MISC-005|zwoi|Doubtful Internet service|confirm that ; should be running \(;\)|ARC-12
MISC-006|zcio|Possible DoS problem|Is your host a DoS threat|CVE-1999-0103
MISC-007|rs|unrestricted modem|Unrestricted modem on the Internet|ARC-0024
MISC-008|zcio|remote control server|Verify good passwords on ;|ARC-0025
#
MYSQL-001|ycio|MYSQL Version|mysql may be vulnerable to password change overflow|CVE-2002-1374
MYSQL-002|ycio|MYSQL Version|mysql may be vulnerable to password handler overflow|CVE-2003-0780
MYSQL-003|ycio|MYSQL Version|mysql may be vulnerable to multiple vulnerabilities|CVE-2004-0627
MYSQL-004|ycio|MYSQL Version|mysql may be vulnerable to password length buffer overflow|CVE-2003-1734
MYSQL-005|us|MYSQL Account|mysql has an open account \(mysql\)|ARC-0003|
#
NIS-001|ycio|NIS service|NIS password file access|ARC-0021
#
NFS-001|uw|NFS export via portmapper|exports ; via portmapper|CVE-1999-0168
NFS-002|uw|unrestricted NFS export|exports ; to possibly everyone|ARC-0014
NFS-003|ur|NFS export to unprivileged programs|exports ; to unprivileged programs|ARC-0015
NFS-004|uw|unrestricted NFS export|Exports ; to everyone|ARC-0015
#
ORA-001|ycio|Oracle Listener Weaknesses|Buffer leakage yielded account names|ARC-0004|
ORA-002|ycio|Oracle Listener Weaknesses|Listener is not password protected|ARC-0005
ORA-003|us|Oracle Listener|Arbitrary files can be overwritten|CVE-2000-0818|ARC-0006
ORA-004|ycio|Possible Oracle Listener Problem|Arbitrary files may be overwritten|CVE-2000-0818
ORA-005|ycio|Oracle Version|Oracle version may be vulnerable to an overflow in CREATE DATABASE LINK|CVE-2003-0222
ORA-006|ycio|Oracle Version|Oracle version may be subject to multiple vulnerabilities|ARC-0007
#
POP-001|ycio|pop3 version|pop3 version ; may be vulnerable to buffer overflow|ARC-0027
POP-002|ycio|imap version|imap version may be vulnerable to buffer overflow|ARC-0027
#
PNP-001|us|Plug and Play Vulnerability|PnP exploitable via buffer overflow|CVE-2005-1983
#
PTR-001|ycio|printer version|LPRng print spooler may be vulnerable|CVE-2002-0378
#
SHELL-001|ycio|Possible Worm|possible shell backdoor found at port ;|ARC-2012
SHELL-002|us|REXD access|rexd is vulnerable to the world|CVE-1999-0627
SHELL-003|ht|hacker program found|System may compromised: bnc on port ;|ARC-0022
SHELL-004|ht|hacker program found|System may be compromised: pb on port ;|ARC-0022
SHELL-005|ht|hacker program found|System may be compromised: xdcc on port ;|ARC-0022
SHELL-006|ht|hacker program found|System may be compromised: Ser-U on port ;|ARC-0022
SHELL-007|ht|hacker program found|System may be compromised: svchost on port ;|ARC-0022
SHELL-008|ht|hacker program found|System may be compromised: binshell on port ;|ARC-0022
SHELL-009|ht|hacker program found|System may be compromised: cmd.exe on port ;|ARC-0022

#
SMB-001|uw|open SMB share|open shares at|CVE-1999-0584
SMB-002|uw|remote SMB server logon|No password for account|CVE-1999-0519
SMB-003|uw|remote SMB server logon|Password guessable for account|CVE-1999-0518|
SMB-004|zcio|visible SMB shares|SMB: One or more visible shares|ARC-0008
SMB-005|zcio|netbios over the internet|Is your Netbios secure|NOCVE
SMB-006|bo|Vulnerable Samba Server|Samba server vulnerable to compromise|CVE-2003-0201
#
SMTP-001|ycio|sendmail version|possible vulnerability in Exim|CVE-2004-0400
SMTP-002|ycio|sendmail version|possible vulnerability in sendmail|CVE-2006-0058
SMTP-003|ycio|sendmail version|possible race condition in sendmail|CVE-2006-0058
SMTP-004|ycio|sendmail version|sendmail ; may be vulnerable to buffer overflow|CVE-2003-0694
SMTP-005|ycio|possible sendmail version|sendmail ; may be vulnerable to buffer overflow|CVE-2003-0694
SMTP-006|zcio|sendmail configuration|sendmail ; command may provide hacker information|ARC-0026
SMTP-007|ycio|sendmail configuration|sendmail DEBUG may allow unauthorized access|ARC-0026
#
RDP-001|uw|remote rdesktop server logon|Password guessable for account|CVE-1999-0518|
#
REG-001|zcio|Registry Entry for Internet Explorer|Possible vulnerable version found|NOCVE
REG-002|zcio|Registry Entry for MS-SQL|Possible vulnerable version found|NOCVE
REG-003|zcio|Registry Entry for Outlook Express|Possible vulnerable version found|NOCVE
RPC-001|us|Microsoft RPC Server|Microsoft RPC Services may be vulnerable to buffer overflow|CVE-2003-0715
RPC-002|zcio|RPC Server|Confirm that Microsoft DCOM is disabled or patched|CVE-2003-0715
RPC-003|us|Windows Messaging Service|WMS via ms-rpc appears to be vulnerable|CVE-2003-0813
RPC-004|zcio|Unknown Windows Messaging Service|WMS via ms-rpc may be vulnerable|CVE-2003-0813
SOL-001|ycio|sadmind version|sadmind may be vulnerable to buffer overflow|CVE-2003-0722
SOL-002|ycio|rpc cmsd version|calendar manager version may be vulnerable to buffer overflow|CVE-1999-0696
SOL-003|ycio|tooltalk version|tooltalk version may be vulnerable to buffer overflow|CVE-2002-0678
SOL-004|ycio|ypasswdd version|ypasswdd version may be vulnerable to buffer overlow|CVE-2001-0779
SOL-005|ycio|snmpXdmid access|snmpXdmid on SunOS is vulnerable if not patched|CVE-2001-0236

#
SQL-001|us|MSSQL SA Account|No Password for SA Account on MSSQL|CVE-2000-1209
SQL-002|us|MSSQL 2000 Vulnerable| MSSQL vulnerable to buffer overflow|CVE-2003-0649
#
LSA-001|bo|LSASS service|LSASS may be vulnerable to buffer overflow|CVE-2003-0533
#
SSH-001|yus|Possible SSH vulnerabilities|OpenSSH may be vulnerable|CVE-2003-0693
SSH-002|yus|Possible SSH vulnerabilities|SSH V 3.0.x may be vulnerable|CA-2002-1357
#
TEL-001|bo|telnetd version|IRIX telnetd version is vulnerable|CVE-2000-0733
TEL-002|ycio|telnetd version|IRIX telnetd version may be vulnerable|CVE-2000-0733
TEL-003|bo|telnetd version|buffer overlow in telnetd \(AYT\) ;|CVE-2001-0554
#
TFTP-001|nr|TFTP file access|TFTP file read|ARC-0020
TFTP-002|nw|TFTP file access|TFTP file write|ARC-0020
