New VA Modules: NSE: 2, OpenVAS: 44, MSF: 3, Nessus: 13

[New VA Module Alert Service <postmaster () insecure org>]

This report describes any new scripts/modules/exploits added to Nmap,
OpenVAS, Metasploit, and Nessus since yesterday.

== Nmap Scripting Engine scripts (2) ==

r27058 openvas-otp-brute http://nmap.org/nsedoc/scripts/openvas-otp-brute.html
Performs brute force password auditing against a OpenVAS vulnerability
scanner daemon using the OTP 1.0 protocol.

r27059 metasploit-xmlrpc-brute http://nmap.org/nsedoc/scripts/metasploit-xmlrpc-brute.html
Performs brute force password auditing against a Metasploit RPC server
using the XMLRPC protocol.

== OpenVAS plugins (44) ==

r12107 103318 gb_dell_kace_2000_backdoor.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_dell_kace_2000_backdoor.nasl?root=openvas&view=markup
Dell KACE K2000 Backdoor

r12107 103317 gb_dell_kace_2000_web_detect.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_dell_kace_2000_web_detect.nasl?root=openvas&view=markup
Dell KACE K2000 Detection

r12108 802342 gb_emo_realty_manager_sql_inj_vuln.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_emo_realty_manager_sql_inj_vuln.nasl?root=openvas&view=markup
EMO Realty Manager 'cat1' Parameter SQL Injection Vulnerability

r12108 881030 gb_CESA-2011_1402_freetype_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1402_freetype_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for freetype CESA-2011:1402 centos4 i386

r12108 881041 gb_CESA-2011_1438_thunderbird_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1438_thunderbird_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for thunderbird CESA-2011:1438 centos4 i386

r12108 881034 gb_CESA-2011_1438_thunderbird_centos5_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1438_thunderbird_centos5_i386.nasl?root=openvas&view=markup
CentOS Update for thunderbird CESA-2011:1438 centos5 i386

r12108 863612 gb_fedora_2011_15673_icedtea-web_fc15.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_fedora_2011_15673_icedtea-web_fc15.nasl?root=openvas&view=markup
Fedora Update for icedtea-web FEDORA-2011-15673

r12108 870512 gb_RHSA-2011_1440-01_seamonkey.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_RHSA-2011_1440-01_seamonkey.nasl?root=openvas&view=markup
RedHat Update for seamonkey RHSA-2011:1440-01

r12108 881040 gb_CESA-2011_1385_kdelibs_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1385_kdelibs_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for kdelibs CESA-2011:1385 centos4 i386

r12108 881031 gb_CESA-2011_1349_popt_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1349_popt_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for popt CESA-2011:1349 centos4 i386

r12108 881039 gb_CESA-2011_1371_finch_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1371_finch_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for finch CESA-2011:1371 centos4 i386

r12108 881033 gb_CESA-2011_1440_seamonkey_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1440_seamonkey_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for seamonkey CESA-2011:1440 centos4 i386

r12108 863610 gb_fedora_2011_14538_asterisk_fc15.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_fedora_2011_14538_asterisk_fc15.nasl?root=openvas&view=markup
Fedora Update for asterisk FEDORA-2011-14538

r12108 870511 gb_RHSA-2011_1444-01_nss.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_RHSA-2011_1444-01_nss.nasl?root=openvas&view=markup
RedHat Update for nss RHSA-2011:1444-01

r12108 802402 gb_labwiki_mult_xss_n_shell_upload_vuln.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_labwiki_mult_xss_n_shell_upload_vuln.nasl?root=openvas&view=markup
LabWiki Multiple Cross-site Scripting (XSS) and Shell Upload
Vulnerabilities

r12108 863611 gb_fedora_2011_14749_freetype_fc15.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_fedora_2011_14749_freetype_fc15.nasl?root=openvas&view=markup
Fedora Update for freetype FEDORA-2011-14749

r12108 831490 gb_mandriva_MDVSA_2011_169.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_mandriva_MDVSA_2011_169.nasl?root=openvas&view=markup
Mandriva Update for mozilla MDVSA-2011:169 (mozilla)

r12108 840803 gb_ubuntu_USN_1252_1.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_ubuntu_USN_1252_1.nasl?root=openvas&view=markup
Ubuntu Update for tomcat6 USN-1252-1

r12108 802271 gb_absoluteftp_list_cmd_bof_vuln.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_absoluteftp_list_cmd_bof_vuln.nasl?root=openvas&view=markup
AbsoluteFTP 'LIST' Command Remote Buffer Overflow Vulnerability

r12108 881037 gb_CESA-2011_1444_nss_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1444_nss_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for nss CESA-2011:1444 centos4 i386

r12108 840802 gb_ubuntu_USN_1256_1.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_ubuntu_USN_1256_1.nasl?root=openvas&view=markup
Ubuntu Update for linux-lts-backport-natty USN-1256-1

r12108 881036 gb_CESA-2011_1444_nss_centos5_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1444_nss_centos5_i386.nasl?root=openvas&view=markup
CentOS Update for nss CESA-2011:1444 centos5 i386

r12108 881035 gb_CESA-2011_1437_firefox_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1437_firefox_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for firefox CESA-2011:1437 centos4 i386

r12108 863613 gb_fedora_2011_15119_clamav_fc15.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_fedora_2011_15119_clamav_fc15.nasl?root=openvas&view=markup
Fedora Update for clamav FEDORA-2011-15119

r12108 870514 gb_RHSA-2011_1438-01_thunderbird.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_RHSA-2011_1438-01_thunderbird.nasl?root=openvas&view=markup
RedHat Update for thunderbird RHSA-2011:1438-01

r12108 881043 gb_CESA-2011_1437_firefox_centos5_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1437_firefox_centos5_i386.nasl?root=openvas&view=markup
CentOS Update for firefox CESA-2011:1437 centos5 i386

r12108 840797 gb_ubuntu_USN_1258_1.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_ubuntu_USN_1258_1.nasl?root=openvas&view=markup
Ubuntu Update for clamav USN-1258-1

r12108 802508 gb_adobe_shockwave_player_mult_vuln_nov11_win.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_adobe_shockwave_player_mult_vuln_nov11_win.nasl?root=openvas&view=markup
Adobe Shockwave Player Multiple Vulnerabilities (Windows) - Nov 2011

r12108 802501 gb_investintech_prdts_detect.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_investintech_prdts_detect.nasl?root=openvas&view=markup
Investintech Products Version Detection

r12108 881042 gb_CESA-2011_1377_postgresql_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1377_postgresql_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for postgresql CESA-2011:1377 centos4 i386

r12108 863609 gb_fedora_2011_15005_tomcat6_fc15.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_fedora_2011_15005_tomcat6_fc15.nasl?root=openvas&view=markup
Fedora Update for tomcat6 FEDORA-2011-15005

r12108 881038 gb_CESA-2011_1360_xorg-x11_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1360_xorg-x11_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for xorg-x11 CESA-2011:1360 centos4 i386

r12108 881032 gb_CESA-2011_1392_httpd_centos4_i386.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_CESA-2011_1392_httpd_centos4_i386.nasl?root=openvas&view=markup
CentOS Update for httpd CESA-2011:1392 centos4 i386

r12108 802506 gb_investintech_prdts_dos_vuln.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_investintech_prdts_dos_vuln.nasl?root=openvas&view=markup
Investintech Products Denial of Service Vulnerabilities

r12108 870513 gb_RHSA-2011_1437-01_firefox.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_RHSA-2011_1437-01_firefox.nasl?root=openvas&view=markup
RedHat Update for firefox RHSA-2011:1437-01

r12108 831491 gb_mandriva_MDVSA_2011_168.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_mandriva_MDVSA_2011_168.nasl?root=openvas&view=markup
Mandriva Update for apache MDVSA-2011:168 (apache)

r12108 840801 gb_ubuntu_USN_1251_1.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_ubuntu_USN_1251_1.nasl?root=openvas&view=markup
Ubuntu Update for firefox USN-1251-1

r12108 840804 gb_ubuntu_USN_1253_1.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_ubuntu_USN_1253_1.nasl?root=openvas&view=markup
Ubuntu Update for linux USN-1253-1

r12108 831488 gb_mandriva_MDVA_2011_072.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_mandriva_MDVA_2011_072.nasl?root=openvas&view=markup
Mandriva Update for timezone MDVA-2011:072 (timezone)

r12108 802507 gb_adobe_shockwave_player_mult_vuln_nov11_macosx.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_adobe_shockwave_player_mult_vuln_nov11_macosx.nasl?root=openvas&view=markup
Adobe Shockwave Player Multiple Vulnerabilities (MAC OS X) - Nov 2011

r12108 840800 gb_ubuntu_USN_1255_1.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_ubuntu_USN_1255_1.nasl?root=openvas&view=markup
Ubuntu Update for libmodplug USN-1255-1

r12108 863608 gb_fedora_2011_15076_clamav_fc14.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_fedora_2011_15076_clamav_fc14.nasl?root=openvas&view=markup
Fedora Update for clamav FEDORA-2011-15076

r12108 840799 gb_ubuntu_USN_1257_1.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_ubuntu_USN_1257_1.nasl?root=openvas&view=markup
Ubuntu Update for radvd USN-1257-1

r12108 840798 gb_ubuntu_USN_1259_1.nasl
http://wald.intevation.org/plugins/scmsvn/viewcvs.php/trunk/openvas-plugins/scripts/gb_ubuntu_USN_1259_1.nasl?root=openvas&view=markup
Ubuntu Update for apache2 USN-1259-1

== Metasploit modules (3) ==

r14218 http://metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/voip/asterisk_login.rb
Asterisk Manager Login Utility

r14231 
http://metasploit.com/redmine/projects/framework/repository/entry/modules/post/windows/gather/forensics/duqu_check.rb
Duqu Registry Check

r14232 http://metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/scanner/http/owa_login.rb
Outlook Web App (OWA) Brute Force Utility

== Nessus plugins (13) ==

56771 juniper_psn-2011-10-392.nasl
http://nessus.org/plugins/index.php?view=single&id=56771
Junos J-Web Administrator Logs XSS (PSN-2011-10-392)

56770 juniper_psn-2011-10-391.nasl
http://nessus.org/plugins/index.php?view=single&id=56770
Junos Next-Gen MVPN Senario DoS (PSN-2011-10-391)

56769 juniper_psn-2011-08-327.nasl
http://nessus.org/plugins/index.php?view=single&id=56769
Junos MPC DoS (PSN-2011-08-327)

56768 ubuntu_USN-1256-1.nasl
http://nessus.org/plugins/index.php?view=single&id=56768
USN-1256-1 : linux-lts-backport-natty vulnerabilities

56767 ubuntu_USN-1255-1.nasl
http://nessus.org/plugins/index.php?view=single&id=56767
USN-1255-1 : libmodplug vulnerabilities

56766 redhat-RHSA-2011-1444.nasl
http://nessus.org/plugins/index.php?view=single&id=56766
RHSA-2011-1444: nss

56765 mandriva_MDVSA-2011-169.nasl
http://nessus.org/plugins/index.php?view=single&id=56765
MDVSA-2011:169 : mozilla

56764 mandriva_MDVSA-2011-168.nasl
http://nessus.org/plugins/index.php?view=single&id=56764
MDVSA-2011:168 : apache

56763 freebsd_pkg_bdec8dc20b3b11e1b722001cc0476564.nasl
http://nessus.org/plugins/index.php?view=single&id=56763
FreeBSD : gnutls -- client session resumption vulnerability
(bdec8dc2-0b3b-11e1-b722-001cc0476564)

56762 freebsd_pkg_6c8ad3e80a3011e195804061862b8c22.nasl
http://nessus.org/plugins/index.php?view=single&id=56762
FreeBSD : mozilla -- multiple vulnerabilities
(6c8ad3e8-0a30-11e1-9580-4061862b8c22)

56761 debian_DSA-2343.nasl
http://nessus.org/plugins/index.php?view=single&id=56761
[DSA2343] DSA-2343-1 openssl

56760 debian_DSA-2342.nasl
http://nessus.org/plugins/index.php?view=single&id=56760
[DSA2342] DSA-2342-1 iceape

56759 debian_DSA-2341.nasl
http://nessus.org/plugins/index.php?view=single&id=56759
[DSA2341] DSA-2341-1 iceweasel
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/