New VA Modules: NSE: 5, MSF: 8, Nessus: 14

[New VA Module Alert Service <postmaster () insecure org>]

This report describes any new scripts/modules/exploits added to Nmap,
OpenVAS, Metasploit, and Nessus since yesterday.

== Nmap Scripting Engine scripts (5) ==

r26938 http-robtex-reverse-ip http://nmap.org/nsedoc/scripts/http-robtex-reverse-ip.html
This script is inspired from http-reverse-ip to do a reverse ip lookup
using robtex website by parsing http://www.robtex.com/ip/ and return
maximum of 100 domains

r26939 rtsp-url-brute http://nmap.org/nsedoc/scripts/rtsp-url-brute.html
Attempts to brute common RTSP media URLs for devices such as
surveillance IP cameras.

r26939 rtsp-methods http://nmap.org/nsedoc/scripts/rtsp-methods.html
Finds out what methods are supported by the RTSP server.

r26940 nessus-brute http://nmap.org/nsedoc/scripts/nessus-brute.html
Performs password guessing against the Nessus service using the NTP 1.2
protocol.

r26941 irc-brute http://nmap.org/nsedoc/scripts/irc-brute.html
Performs password guessing agains the IRC service

== Metasploit modules (8) ==

r14073 
http://metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/multi/http/phpscheduleit_start_date.rb
phpScheduleIt PHP reserve.php start_date Parameter Arbitrary Code
Injection

r14075 http://metasploit.com/redmine/projects/framework/repository/entry/modules/exploits/windows/fileformat/gta_samp.rb
GTA SA-MP server.cfg Buffer Overflow

r14077 http://metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/analyze/jtr_mssql_fast.rb
John the Ripper MS SQL Password Cracker (Fast Mode)

r14078 http://metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/analyze/jtr_mysql_fast.rb
John the Ripper MySQL Password Cracker (Fast Mode)

r14079 http://metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/analyze/jtr_oracle_fast.rb
John the Ripper Oracle Password Cracker (Fast Mode)

r14080 http://metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/analyze/postgres_md5_crack.rb
Postgres SQL md5 Password Cracker

r14081 http://metasploit.com/redmine/projects/framework/repository/entry/modules/auxiliary/analyze/jtr_unshadow.rb
Unix Unshadow Utility

r14087 
http://metasploit.com/redmine/projects/framework/repository/entry/modules/post/windows/gather/enum_domain_tokens.rb
Windows Gather Enumerate Domain Tokens

== Nessus plugins (14) ==

56661 redhat-RHSA-2011-1409.nasl
http://nessus.org/plugins/index.php?view=single&id=56661
RHSA-2011-1409: openssl

56660 gentoo_GLSA-201110-26.nasl
http://nessus.org/plugins/index.php?view=single&id=56660
GLSA-201110-26 : libxml2: Multiple vulnerabilities

56659 gentoo_GLSA-201110-25.nasl
http://nessus.org/plugins/index.php?view=single&id=56659
GLSA-201110-25 : Pure-FTPd: Multiple vulnerabilities

56658 gentoo_GLSA-201110-24.nasl
http://nessus.org/plugins/index.php?view=single&id=56658
GLSA-201110-24 : Squid: Multiple vulnerabilities

56657 freebsd_pkg_395e0faaffa711e08ac46c626dd55a41.nasl
http://nessus.org/plugins/index.php?view=single&id=56657
FreeBSD : phpmyfaq -- Remote PHP Code Injection Vulnerability
(395e0faa-ffa7-11e0-8ac4-6c626dd55a41)

56656 fedora_2011-14022.nasl
http://nessus.org/plugins/index.php?view=single&id=56656
Fedora 15 2011-14022

56655 fedora_2011-14000.nasl
http://nessus.org/plugins/index.php?view=single&id=56655
Fedora 14 2011-14000

56654 centos_RHSA-2011-1402.nasl
http://nessus.org/plugins/index.php?view=single&id=56654
CentOS : RHSA-2011-1402

56653 oracle_rdbms_cpu_oct_2011.nasl
http://nessus.org/plugins/index.php?view=single&id=56653
Oracle Database, October 2011 Critical Patch Update

56652 phpmyadmin_pmasa_2011_16.nasl
http://nessus.org/plugins/index.php?view=single&id=56652
phpMyAdmin 3.4.x < 3.4.6 Cross-Site Scripting (PMASA-2011-16)

56651 hp_mfp_dss_4_20.nasl
http://nessus.org/plugins/index.php?view=single&id=56651
HP MFP Digital Sending Software 4.9x <= 4.91.21 Local Information
Disclosure

56650 google_chrome_15_0_874_102.nasl
http://nessus.org/plugins/index.php?view=single&id=56650
Google Chrome < 15.0.874.102 Multiple Vulnerabilities

56649 sonicwall_viewpoint_default_creds.nasl
http://nessus.org/plugins/index.php?view=single&id=56649
SonicWALL ViewPoint Server Default Credentials

56648 sonicwall_viewpoint_detect.nasl
http://nessus.org/plugins/index.php?view=single&id=56648
SonicWALL ViewPoint Server Detection
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/