Nmap: Network Exploration and Security Auditing Cookbook - Second Edition

How to do it...

Launch the NSE scripts in the vuln category against your target:

$nmap -sV --script vuln <target>

If you are lucky, you will see a vulnerability report:

   PORT     STATE SERVICE REASON    306/tcp open  mysql   syn-ack    mysql-vuln-cve2012-2122:       VULNERABLE:       Authentication bypass in MySQL servers.         State: VULNERABLE         IDs:  CVE:CVE-2012-2122         Description:           When a user connects to MariaDB/MySQL, a token (SHA           over a password and a random scramble string) is calculated         and compared           with the expected value. Because of incorrect casting, it       might've           happened that the token and the expected value were       considered equal,           even if the memcmp() returned a non-zero value. In this case  MySQL/MariaDB would think that the password is correct, ...