All pastes #472929 Raw Edit

Anonymous

public html v1 · immutable
·published 2007-05-05 22:39 UTC
rendered paste body
<head><META http-equiv="Content-Type" content="text/html"><title>Tenable Nessus Security Report</title><style type="text/css">			@import url("css/report_style.css");		</style></head><body><table width="100%" cellspacing="0" cellpadding="0"><tr><td align="center" colspan="2" width="100%"><table width="90%" height="100%" cellspacing="0" align="center"><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100%" colspan="2"><table width="100%" cellspacing="0" cellpadding="0" class="report_title"><tr><td align="center"><a name="top">									Tenable Nessus Security Report								</a></td></tr></table></td></tr></table></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100%" height="100%"><table width="100%" height="100%" class="border" cellspacing="0" cellpadding="0"><tr><td class="report_host">Start Time:</td><td class="report_time">Sat May 05 17:31:40 2007</td><td class="report_host">Finish Time:</td><td class="report_time">Sat May 05 18:29:37 2007</td></tr></table></td></tr></table></td></tr><tr><td height="40"></td></tr><tr><td width="100%" colspan="2"><table width="100%" class="report_table_title" cellspacing="0" cellpadding="0"><tr><td align="center">70.87.45.130</td></tr></table></td></tr><tr><td class="border"><div class="desc_text"></div></td></tr><tr><td width="100%" class="border"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="20%" height="100%"><div class="report_host"><a href="#70.87.45.130"><img border="0" src="images/host.gif" align="absMiddle">70.87.45.130</a></div></td><td class="summary_text"><img src="images/pixel.gif" width="20" align="absMiddle">21 Open Ports,							 99 Notes,							 8 Warnings,							 13 Holes.						</td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td height="40"></td></tr></table></td></tr></table><table width="90%" align="center"><tr><td width="100%" colspan="2"><table width="100%" class="report_table_title" cellspacing="0" cellpadding="0"><tr><td align="right"><a name="70.87.45.130">70.87.45.130</a></td><td align="right"><a href="#top">[Return to top]</a></td></tr></table></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>pop3s (995/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/info.gif" class="alert_img" align="top"></td><td><div class="desc_text">The SSL certificate of the remote service expired Apr 22 23:16:50 2007 GMT!<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=15901">15901</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A SSLv2 server answered on this port<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A pop3 server is running on this port<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service encrypts traffic using a protocol with known<br/>weaknesses. <br/><br/><p><b>Description</b> :<br/><br/>The remote service accepts connections encrypted using SSL 2.0, which<br/>reportedly suffers from several cryptographic flaws and has been<br/>deprecated for several years.  An attacker may be able to exploit these<br/>issues to conduct man-in-the-middle attacks or decrypt communications<br/>between the affected service and clients. <br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.schneier.com/paper-ssl.pdf">http://www.schneier.com/paper-ssl.pdf</a><br/><br/><p><b>Solution</b>: <br/><br/>Consult the application's documentation to disable SSL 2.0 and use SSL<br/>3.0 or TLS 1.0 instead.<br/><br/><p><b>Risk Factor</b> : <br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=20007">20007</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>A POP server is listening on the remote port<br/><br/><p><b>Description</b> :<br/><br/>The remote host is running a POP server. <br/><br/><p><b>Solution</b>: <br/><br/>Disable this service if you do not use it.<br/><br/><p><b>Risk Factor</b> : <br/><br/>None<br/><br/><p><b>Plugin output</b> :<br/><br/>Remote POP server banner :<br/>+OK POP3 vanity [cppop 20.0] at [70.87.45.130]<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10185">10185</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service supports the use of weak SSL ciphers.<br/><br/><p><b>Description</b> :<br/><br/>The remote host supports the use of SSL ciphers that<br/>offer either weak encryption or no encryption at all.<br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.openssl.org/docs/apps/ciphers.html">http://www.openssl.org/docs/apps/ciphers.html</a><br/><br/><p><b>Solution</b>:<br/><br/>Reconfigure the affected application if possible to avoid use of <br/>weak ciphers.<br/><br/><p><b>Risk Factor</b> : <br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Here is a list of the SSL ciphers supported by the remote server :<br/><br/>  Export Ciphers<br/>    SSLv2<br/>      EXP-RC2-CBC-MD5            Kx=RSA(512)   Au=RSA     Enc=RC2(40)      Mac=MD5    export     <br/>      EXP-RC4-MD5                Kx=RSA(512)   Au=RSA     Enc=RC4(40)      Mac=MD5    export     <br/>    TLSv1<br/>      EXP1024-DES-CBC-SHA        Kx=RSA(1024)  Au=RSA     Enc=DES(56)      Mac=SHA1   export     <br/>      EXP1024-RC2-CBC-MD5        Kx=RSA(1024)  Au=RSA     Enc=RC2(56)      Mac=MD5    export     <br/>      EXP1024-RC4-MD5            Kx=RSA(1024)  Au=RSA     Enc=RC4(56)      Mac=MD5    export     <br/>      EXP1024-RC4-SHA            Kx=RSA(1024)  Au=RSA     Enc=RC4(56)      Mac=SHA1   export     <br/><br/>  Low Strength Ciphers (excluding export, < 128-bit key)<br/>    SSLv2<br/>      DES-CBC-MD5                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=MD5    <br/>      RC4-64-MD5                 Kx=RSA        Au=RSA     Enc=RC4(64)      Mac=MD5    <br/>    SSLv3<br/>      DES-CBC-SHA                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=SHA1   <br/>    TLSv1<br/>      DES-CBC-SHA                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=SHA1   <br/><br/>  Medium Strength Ciphers (128-bit key)<br/>    SSLv2<br/>      RC2-CBC-MD5                Kx=RSA        Au=RSA     Enc=RC2(128)     Mac=MD5    <br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>    SSLv3<br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>      RC4-SHA                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=SHA1   <br/>    TLSv1<br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>      RC4-SHA                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=SHA1   <br/><br/>  High Strength Ciphers (> 128-bit key)<br/>    SSLv2<br/>      DES-CBC3-MD5               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=MD5    <br/>    SSLv3<br/>      DES-CBC3-SHA               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=SHA1   <br/>    TLSv1<br/>      DES-CBC3-SHA               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=SHA1   <br/>      AES128-SHA                 Kx=RSA        Au=RSA     Enc=AES(128)     Mac=SHA1   <br/>      AES256-SHA                 Kx=RSA        Au=RSA     Enc=AES(256)     Mac=SHA1   <br/><br/>The fields above are :<br/><br/>  {OpenSSL ciphername}<br/>  Kx={key exchange}<br/>  Au={authentication}<br/>  Enc={symmetric encryption method}<br/>  Mac={message authentication code}<br/>  {export flag}<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=21643">21643</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>imaps (993/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/info.gif" class="alert_img" align="top"></td><td><div class="desc_text">The SSL certificate of the remote service expired Apr 22 23:16:50 2007 GMT!<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=15901">15901</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A SSLv2 server answered on this port<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">An IMAP server is running on this port through SSL<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service encrypts traffic using a protocol with known<br/>weaknesses. <br/><br/><p><b>Description</b> :<br/><br/>The remote service accepts connections encrypted using SSL 2.0, which<br/>reportedly suffers from several cryptographic flaws and has been<br/>deprecated for several years.  An attacker may be able to exploit these<br/>issues to conduct man-in-the-middle attacks or decrypt communications<br/>between the affected service and clients. <br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.schneier.com/paper-ssl.pdf">http://www.schneier.com/paper-ssl.pdf</a><br/><br/><p><b>Solution</b>: <br/><br/>Consult the application's documentation to disable SSL 2.0 and use SSL<br/>3.0 or TLS 1.0 instead.<br/><br/><p><b>Risk Factor</b> : <br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=20007">20007</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>An IMAP server is running on the remote host.<br/><br/><p><b>Description</b> :<br/><br/>An IMAP (Internet Message Access Protocol) server is<br/>installed and running on the remote host.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None<br/><br/><p><b>Plugin output</b> :<br/><br/>The remote imap server banner is :<br/>* OK [CAPABILITY IMAP4REV1 LITERAL+ SASL-IR LOGIN-REFERRALS AUTH=LOGIN] localhost IMAP4rev1 2004.357-cpanel at Sat, 5 May 2007 16:32:56 -0500 (EST)<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11414">11414</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service supports the use of weak SSL ciphers.<br/><br/><p><b>Description</b> :<br/><br/>The remote host supports the use of SSL ciphers that<br/>offer either weak encryption or no encryption at all.<br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.openssl.org/docs/apps/ciphers.html">http://www.openssl.org/docs/apps/ciphers.html</a><br/><br/><p><b>Solution</b>:<br/><br/>Reconfigure the affected application if possible to avoid use of <br/>weak ciphers.<br/><br/><p><b>Risk Factor</b> : <br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Here is a list of the SSL ciphers supported by the remote server :<br/><br/>  Export Ciphers<br/>    SSLv2<br/>      EXP-RC2-CBC-MD5            Kx=RSA(512)   Au=RSA     Enc=RC2(40)      Mac=MD5    export     <br/>      EXP-RC4-MD5                Kx=RSA(512)   Au=RSA     Enc=RC4(40)      Mac=MD5    export     <br/>    SSLv3<br/>      EXP-DES-CBC-SHA            Kx=RSA(512)   Au=RSA     Enc=DES(40)      Mac=SHA1   export     <br/>      EXP-RC2-CBC-MD5            Kx=RSA(512)   Au=RSA     Enc=RC2(40)      Mac=MD5    export     <br/>      EXP-RC4-MD5                Kx=RSA(512)   Au=RSA     Enc=RC4(40)      Mac=MD5    export     <br/>    TLSv1<br/>      EXP1024-DES-CBC-SHA        Kx=RSA(1024)  Au=RSA     Enc=DES(56)      Mac=SHA1   export     <br/>      EXP1024-RC2-CBC-MD5        Kx=RSA(1024)  Au=RSA     Enc=RC2(56)      Mac=MD5    export     <br/>      EXP1024-RC4-MD5            Kx=RSA(1024)  Au=RSA     Enc=RC4(56)      Mac=MD5    export     <br/>      EXP1024-RC4-SHA            Kx=RSA(1024)  Au=RSA     Enc=RC4(56)      Mac=SHA1   export     <br/>      EXP-DES-CBC-SHA            Kx=RSA(512)   Au=RSA     Enc=DES(40)      Mac=SHA1   export     <br/>      EXP-RC2-CBC-MD5            Kx=RSA(512)   Au=RSA     Enc=RC2(40)      Mac=MD5    export     <br/>      EXP-RC4-MD5                Kx=RSA(512)   Au=RSA     Enc=RC4(40)      Mac=MD5    export     <br/><br/>  Low Strength Ciphers (excluding export, < 128-bit key)<br/>    SSLv2<br/>      DES-CBC-MD5                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=MD5    <br/>      RC4-64-MD5                 Kx=RSA        Au=RSA     Enc=RC4(64)      Mac=MD5    <br/>    SSLv3<br/>      DES-CBC-SHA                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=SHA1   <br/>    TLSv1<br/>      DES-CBC-SHA                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=SHA1   <br/><br/>  Medium Strength Ciphers (128-bit key)<br/>    SSLv2<br/>      RC2-CBC-MD5                Kx=RSA        Au=RSA     Enc=RC2(128)     Mac=MD5    <br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>    SSLv3<br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>      RC4-SHA                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=SHA1   <br/>    TLSv1<br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>      RC4-SHA                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=SHA1   <br/><br/>  High Strength Ciphers (> 128-bit key)<br/>    SSLv2<br/>      DES-CBC3-MD5               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=MD5    <br/>    SSLv3<br/>      DES-CBC3-SHA               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=SHA1   <br/>    TLSv1<br/>      DES-CBC3-SHA               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=SHA1   <br/>      AES128-SHA                 Kx=RSA        Au=RSA     Enc=AES(128)     Mac=SHA1   <br/>      AES256-SHA                 Kx=RSA        Au=RSA     Enc=AES(256)     Mac=SHA1   <br/><br/>The fields above are :<br/><br/>  {OpenSSL ciphername}<br/>  Kx={key exchange}<br/>  Au={authentication}<br/>  Enc={symmetric encryption method}<br/>  Mac={message authentication code}<br/>  {export flag}<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=21643">21643</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>distinct (9999/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">It was possible to make the remote switch reboot by requesting :<br/><br/>	GET /cgi-bin/view-source?/<br/>	<br/><br/>An attacker may use this flaw to prevent your network from working<br/>properly.<br/><br/><p><b>Solution</b>: see <a target="_blank" href="http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml">http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml</a><br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2000-0984, CVE-2000-0984<br/>BID : 1838, 1838<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10682">10682</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A web server is running on this port<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The following CGI have been discovered :<br/><br/>Syntax : cginame (arguments [default value])<br/><br/>/session.cgi (user [] pass [] app [admin] action [login] )<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10662">10662</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote web server type is :<br/><br/>Apache<br/><br/>and the 'ServerTokens' directive is ProductOnly<br/>Apache does not permit to hide the server type.<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10107">10107</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Some information about the remote HTTP configuration can be<br/>extracted.<br/><br/><p><b>Description</b> :<br/><br/>This test gives some information about the remote HTTP protocol - the version<br/>used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...<br/><br/>This test is informational only and does not denote any security problem<br/><br/><p><b>Solution</b>:<br/><br/>None.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None / CVSS Base Score : 0 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Protocol version : HTTP/1.1<br/>SSL : no<br/>Pipelining : yes<br/>Keep-Alive : yes<br/>Options allowed : (Not implemented)<br/>Headers :<br/><br/>  Date: Sat, 05 May 2007 21:45:04 GMT<br/>  Server: Apache<br/>  Keep-Alive: timeout=15, max=100<br/>  Connection: Keep-Alive<br/>  Transfer-Encoding: chunked<br/>  Content-Type: text/html<br/> charset=utf-8<br/>  <br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=24260">24260</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote web server itself is prone to cross-site scripting attacks. <br/><br/><p><b>Description</b> :<br/><br/>The remote host is running a web server that fails to adequately<br/>sanitize request strings of Javascript.  By exploiting this flaw, an<br/>attacker may be able to cause arbitrary HTML and script code to be<br/>executed in a user's browser within the security context of the affected<br/>site. <br/><br/><p><b>Solution</b>: <br/><br/>Contact the vendor for a patch or upgrade.<br/><br/><p><b>Risk Factor</b> :<br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>The request string used to detect this flaw was:<br/><br/>  /?< DEFANGED_script >cross_site_scripting.nasl< /DEFANGED_script ><br/><br/>CVE : CVE-2002-1060, CVE-2005-2453, CVE-2006-1681, CVE-2002-1060, CVE-2005-2453, CVE-2006-1681<br/>BID : 5305, 7344, 7353, 8037, 14473, 17408, 5305, 7344, 7353, 8037, 14473, 17408<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10815">10815</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>mysql (3306/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>A Database server is listening on the remote port.<br/><br/><p><b>Description</b> :<br/><br/>The remote host is running MySQL, an open-source Database server.<br/>The remote database access is restricted and configured to reject<br/>access from not allowed IPs. Therefor it was not possible to extract<br/>its version number.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10719">10719</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>imap (143/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">An IMAP server is running on this port<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>An IMAP server is running on the remote host.<br/><br/><p><b>Description</b> :<br/><br/>An IMAP (Internet Message Access Protocol) server is<br/>installed and running on the remote host.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None<br/><br/><p><b>Plugin output</b> :<br/><br/>The remote imap server banner is :<br/>* OK [CAPABILITY IMAP4REV1 LITERAL+ SASL-IR LOGIN-REFERRALS AUTH=LOGIN] vanity.twisted-delusions.net IMAP4rev1 2004.357-cpanel at Sat, 5 May 2007 16:33:04 -0500 (EST)<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11414">11414</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>sunrpc (111/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>pop3 (110/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote pop3 server is vulnerable to the following<br/>buffer overflow :<br/><br/>	USER test<br/>	PASS <buffer><br/>	<br/>This *may* allow an attacker to execute arbitrary commands<br/>as root on the remote POP3 server.<br/><br/><p><b>Solution</b>: contact your vendor, inform it of this<br/>vulnerability, and ask for a patch<br/><br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-1999-1511<br/>BID : 791<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10325">10325</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A pop3 server is running on this port<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>A POP server is listening on the remote port<br/><br/><p><b>Description</b> :<br/><br/>The remote host is running a POP server. <br/><br/><p><b>Solution</b>: <br/><br/>Disable this service if you do not use it.<br/><br/><p><b>Risk Factor</b> : <br/><br/>None<br/><br/><p><b>Plugin output</b> :<br/><br/>Remote POP server banner :<br/>+OK AVG POP3 Proxy Server 7.5.460/7.5.467 [269.6.4/790]<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10185">10185</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>http (80/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote host is using a version of OpenSSL which is<br/>older than 0.9.6m or 0.9.7d<br/><br/>There are several bug in this version of OpenSSL which may allow<br/>an attacker to cause a denial of service against the remote host.<br/><br/><i> Nessus solely relied on the banner of the remote host</i><br/><i> to issue this warning</i><br/><br/><p><b>Solution</b>: Upgrade to version 0.9.6m (0.9.7d) or newer<br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2004-0079, CVE-2004-0081, CVE-2004-0112, CVE-2004-0079, CVE-2004-0081, CVE-2004-0112<br/>BID : 9899, 9899<br/>Other references : IAVA:2004-B-0006<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=12110">12110</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">It was possible to make the remote switch reboot by requesting :<br/><br/>	GET /cgi-bin/view-source?/<br/>	<br/><br/>An attacker may use this flaw to prevent your network from working<br/>properly.<br/><br/><p><b>Solution</b>: see <a target="_blank" href="http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml">http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml</a><br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2000-0984, CVE-2000-0984<br/>BID : 1838, 1838<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10682">10682</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/info.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote host is using a version of OpenSSL which is<br/>older than 0.9.6j or 0.9.7b<br/><br/>This version is vulnerable to a timing based attack which may<br/>allow an attacker to guess the content of fixed data blocks and<br/>may eventually be able to guess the value of the private RSA key<br/>of the server.<br/><br/>An attacker may use this implementation flaw to sniff the<br/>data going to this host and decrypt some parts of it, as well<br/>as impersonate your server and perform man in the middle attacks.<br/><br/><i> Nessus solely relied on the banner of the remote host</i><br/><i> to issue this warning</i><br/><br/><p><b>See Also</b> : <a target="_blank" href="http://www.openssl.org/news/secadv_20030219.txt">http://www.openssl.org/news/secadv_20030219.txt</a><br/>	   <a target="_blank" href="http://lasecwww.epfl.ch/memo_ssl.shtml">http://lasecwww.epfl.ch/memo_ssl.shtml</a><br/>	   <a target="_blank" href="http://eprint.iacr.org/2003/052/">http://eprint.iacr.org/2003/052/</a><br/><br/><p><b>Solution</b>: Upgrade to version 0.9.6j (0.9.7b) or newer<br/><p><b>Risk Factor</b> : Medium<br/>CVE : CVE-2003-0078, CVE-2003-0131, CVE-2003-0147, CVE-2003-0078, CVE-2003-0131, CVE-2003-0147<br/>BID : 6884, 7148, 6884, 7148<br/>Other references : RHSA:RHSA-2003:101-01, SuSE:SUSE-SA:2003:024<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11267">11267</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A web server is running on this port<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote web server type is :<br/><br/>Apache/1.3.37 (Unix) mod_gzip/1.3.26.1a PHP/5.1.6 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 mod_ssl/2.8.28 OpenSSL/0.9.7a<br/><br/><br/><p><b>Solution</b>: You can set the directive 'ServerTokens Prod' to limit<br/>the information emanating from the server in its response headers.<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10107">10107</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Some information about the remote HTTP configuration can be<br/>extracted.<br/><br/><p><b>Description</b> :<br/><br/>This test gives some information about the remote HTTP protocol - the version<br/>used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...<br/><br/>This test is informational only and does not denote any security problem<br/><br/><p><b>Solution</b>:<br/><br/>None.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None / CVSS Base Score : 0 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Protocol version : HTTP/1.1<br/>SSL : no<br/>Pipelining : yes<br/>Keep-Alive : yes<br/>Options allowed : GET, HEAD, OPTIONS, TRACE<br/>Headers :<br/><br/>  Date: Sat, 05 May 2007 21:45:10 GMT<br/>  Server: Apache/1.3.37 (Unix) mod_gzip/1.3.26.1a PHP/5.1.6 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 mod_ssl/2.8.28 OpenSSL/0.9.7a<br/>  Last-Modified: Fri, 13 Oct 2006 08:48:45 GMT<br/>  ETag: "c9c06a-b2c-452f52ed"<br/>  Accept-Ranges: bytes<br/>  Content-Length: 2860<br/>  Keep-Alive: timeout=15, max=100<br/>  Connection: Keep-Alive<br/>  Content-Type: text/html<br/> charset=iso-8859-5<br/>  <br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=24260">24260</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote Apache server can be used to guess the presence of a given user<br/>name on the remote host.<br/><br/><p><b>Description</b> :<br/><br/>When configured with the 'UserDir' option, requests to URLs containing a tilde<br/>followed by a username will redirect the user to a given subdirectory in the<br/>user home.<br/><br/>For instance, by default, requesting /~root/ displays the HTML contents from<br/>/root/public_html/.<br/><br/>If the username requested does not exist, then Apache will reply with a <br/>different error code. Therefore, an attacker may exploit this vulnerability<br/>to guess the presence of a given user name on the remote host.<br/><br/><p><b>Solution</b>: <br/><br/>In httpd.conf, set the 'UserDir' to 'disabled'.<br/><br/><p><b>Risk Factor</b> :<br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/>CVE : CVE-2001-1013, CVE-2001-1013<br/>BID : 3335, 3335<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10766">10766</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Debugging functions are enabled on the remote HTTP server.<br/><br/><p><b>Description</b> :<br/><br/>The remote webserver supports the TRACE and/or TRACK methods. TRACE and TRACK<br/>are HTTP methods which are used to debug web server connections.   <br/><br/>It has been shown that servers supporting this method are subject to<br/>cross-site-scripting attacks, dubbed XST for "Cross-Site-Tracing", when<br/>used in conjunction with various weaknesses in browsers. <br/><br/>An attacker may use this flaw to trick your legitimate web users to give<br/>him their credentials. <br/><br/><p><b>Solution</b>:<br/><br/>Disable these methods.<br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.kb.cert.org/vuls/id/867593">http://www.kb.cert.org/vuls/id/867593</a><br/><br/><p><b>Risk Factor</b> :<br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/><br/><p><b>Solution</b>: <br/>Add the following lines for each virtual host in your configuration file :<br/><br/>    RewriteEngine on<br/>    RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)<br/>    RewriteRule .* - [F]<br/><br/><br/>CVE : CVE-2004-2320, CVE-2004-2320<br/>BID : 9506, 9561, 11604, 9506, 9561, 11604<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11213">11213</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>nbx-ser (2095/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">It was possible to make the remote switch reboot by requesting :<br/><br/>	GET /cgi-bin/view-source?/<br/>	<br/><br/>An attacker may use this flaw to prevent your network from working<br/>properly.<br/><br/><p><b>Solution</b>: see <a target="_blank" href="http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml">http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml</a><br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2000-0984, CVE-2000-0984<br/>BID : 1838, 1838<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10682">10682</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A web server is running on this port<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote web server type is :<br/><br/>cpsrvd/10.9.6<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10107">10107</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Some information about the remote HTTP configuration can be<br/>extracted.<br/><br/><p><b>Description</b> :<br/><br/>This test gives some information about the remote HTTP protocol - the version<br/>used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...<br/><br/>This test is informational only and does not denote any security problem<br/><br/><p><b>Solution</b>:<br/><br/>None.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None / CVSS Base Score : 0 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Protocol version : HTTP/1.0<br/>SSL : no<br/>Pipelining : no<br/>Keep-Alive : no<br/>Options allowed : (Not implemented)<br/>Headers :<br/><br/>  WWW-Authenticate: Basic realm="WebMail"<br/>  Connection: close<br/>  Set-Cookie: webmailrelogin=no<br/> path=/<br/>  Server: cpsrvd/10.9.6<br/>  Content-type: text/html<br/>  <br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=24260">24260</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>eli (2087/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">It was possible to make the remote switch reboot by requesting :<br/><br/>	GET /cgi-bin/view-source?/<br/>	<br/><br/>An attacker may use this flaw to prevent your network from working<br/>properly.<br/><br/><p><b>Solution</b>: see <a target="_blank" href="http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml">http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml</a><br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2000-0984, CVE-2000-0984<br/>BID : 1838, 1838<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10682">10682</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/info.gif" class="alert_img" align="top"></td><td><div class="desc_text">The SSL certificate of the remote service expired Apr 22 23:16:50 2007 GMT!<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=15901">15901</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A SSLv2 server answered on this port<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A web server is running on this port through SSL<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service encrypts traffic using a protocol with known<br/>weaknesses. <br/><br/><p><b>Description</b> :<br/><br/>The remote service accepts connections encrypted using SSL 2.0, which<br/>reportedly suffers from several cryptographic flaws and has been<br/>deprecated for several years.  An attacker may be able to exploit these<br/>issues to conduct man-in-the-middle attacks or decrypt communications<br/>between the affected service and clients. <br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.schneier.com/paper-ssl.pdf">http://www.schneier.com/paper-ssl.pdf</a><br/><br/><p><b>Solution</b>: <br/><br/>Consult the application's documentation to disable SSL 2.0 and use SSL<br/>3.0 or TLS 1.0 instead.<br/><br/><p><b>Risk Factor</b> : <br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=20007">20007</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote web server type is :<br/><br/>cpsrvd/10.9.6<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10107">10107</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Some information about the remote HTTP configuration can be<br/>extracted.<br/><br/><p><b>Description</b> :<br/><br/>This test gives some information about the remote HTTP protocol - the version<br/>used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...<br/><br/>This test is informational only and does not denote any security problem<br/><br/><p><b>Solution</b>:<br/><br/>None.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None / CVSS Base Score : 0 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Protocol version : HTTP/1.0<br/>SSL : yes<br/>Pipelining : no<br/>Keep-Alive : no<br/>Options allowed : (Not implemented)<br/>Headers :<br/><br/>  WWW-Authenticate: Basic realm="Web Host Manager"<br/>  Connection: close<br/>  Set-Cookie: whostmgrrelogin=no<br/> path=/<br/>  Server: cpsrvd/10.9.6<br/>  Content-type: text/html<br/>  <br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=24260">24260</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>gnunet (2086/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">It was possible to make the remote switch reboot by requesting :<br/><br/>	GET /cgi-bin/view-source?/<br/>	<br/><br/>An attacker may use this flaw to prevent your network from working<br/>properly.<br/><br/><p><b>Solution</b>: see <a target="_blank" href="http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml">http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml</a><br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2000-0984, CVE-2000-0984<br/>BID : 1838, 1838<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10682">10682</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A web server is running on this port<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote web server type is :<br/><br/>cpsrvd/10.9.6<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10107">10107</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Some information about the remote HTTP configuration can be<br/>extracted.<br/><br/><p><b>Description</b> :<br/><br/>This test gives some information about the remote HTTP protocol - the version<br/>used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...<br/><br/>This test is informational only and does not denote any security problem<br/><br/><p><b>Solution</b>:<br/><br/>None.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None / CVSS Base Score : 0 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Protocol version : HTTP/1.0<br/>SSL : no<br/>Pipelining : no<br/>Keep-Alive : no<br/>Options allowed : (Not implemented)<br/>Headers :<br/><br/>  WWW-Authenticate: Basic realm="Web Host Manager"<br/>  Connection: close<br/>  Set-Cookie: whostmgrrelogin=no<br/> path=/<br/>  Server: cpsrvd/10.9.6<br/>  Content-type: text/html<br/>  <br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=24260">24260</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>radsec (2083/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">It was possible to make the remote switch reboot by requesting :<br/><br/>	GET /cgi-bin/view-source?/<br/>	<br/><br/>An attacker may use this flaw to prevent your network from working<br/>properly.<br/><br/><p><b>Solution</b>: see <a target="_blank" href="http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml">http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml</a><br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2000-0984, CVE-2000-0984<br/>BID : 1838, 1838<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10682">10682</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/info.gif" class="alert_img" align="top"></td><td><div class="desc_text">The SSL certificate of the remote service expired Apr 22 23:16:50 2007 GMT!<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=15901">15901</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A SSLv2 server answered on this port<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A web server is running on this port through SSL<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service encrypts traffic using a protocol with known<br/>weaknesses. <br/><br/><p><b>Description</b> :<br/><br/>The remote service accepts connections encrypted using SSL 2.0, which<br/>reportedly suffers from several cryptographic flaws and has been<br/>deprecated for several years.  An attacker may be able to exploit these<br/>issues to conduct man-in-the-middle attacks or decrypt communications<br/>between the affected service and clients. <br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.schneier.com/paper-ssl.pdf">http://www.schneier.com/paper-ssl.pdf</a><br/><br/><p><b>Solution</b>: <br/><br/>Consult the application's documentation to disable SSL 2.0 and use SSL<br/>3.0 or TLS 1.0 instead.<br/><br/><p><b>Risk Factor</b> : <br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=20007">20007</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote web server type is :<br/><br/>cpsrvd/10.9.6<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10107">10107</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Some information about the remote HTTP configuration can be<br/>extracted.<br/><br/><p><b>Description</b> :<br/><br/>This test gives some information about the remote HTTP protocol - the version<br/>used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...<br/><br/>This test is informational only and does not denote any security problem<br/><br/><p><b>Solution</b>:<br/><br/>None.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None / CVSS Base Score : 0 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Protocol version : HTTP/1.0<br/>SSL : yes<br/>Pipelining : no<br/>Keep-Alive : no<br/>Options allowed : (Not implemented)<br/>Headers :<br/><br/>  WWW-Authenticate: Basic realm="cPanel"<br/>  Connection: close<br/>  Set-Cookie: cprelogin=no<br/> path=/<br/>  Server: cpsrvd/10.9.6<br/>  Content-type: text/html<br/>  <br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=24260">24260</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>infowave (2082/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">It was possible to make the remote switch reboot by requesting :<br/><br/>	GET /cgi-bin/view-source?/<br/>	<br/><br/>An attacker may use this flaw to prevent your network from working<br/>properly.<br/><br/><p><b>Solution</b>: see <a target="_blank" href="http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml">http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml</a><br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2000-0984, CVE-2000-0984<br/>BID : 1838, 1838<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10682">10682</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A web server is running on this port<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote web server type is :<br/><br/>cpsrvd/10.9.6<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10107">10107</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Some information about the remote HTTP configuration can be<br/>extracted.<br/><br/><p><b>Description</b> :<br/><br/>This test gives some information about the remote HTTP protocol - the version<br/>used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...<br/><br/>This test is informational only and does not denote any security problem<br/><br/><p><b>Solution</b>:<br/><br/>None.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None / CVSS Base Score : 0 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Protocol version : HTTP/1.0<br/>SSL : no<br/>Pipelining : no<br/>Keep-Alive : no<br/>Options allowed : (Not implemented)<br/>Headers :<br/><br/>  WWW-Authenticate: Basic realm="cPanel"<br/>  Connection: close<br/>  Set-Cookie: cprelogin=no<br/> path=/<br/>  Server: cpsrvd/10.9.6<br/>  Content-type: text/html<br/>  <br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=24260">24260</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>domain (53/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A DNS server is running on this port. If you do not use it, disable it.<br/><br/><p><b>Risk Factor</b> : Low<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11002">11002</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>It is possible to obtain the version number of the remote DNS server.<br/><br/><p><b>Description</b> :<br/><br/>The remote host is running BIND, an open-source DNS server. It is possible<br/>to extract the version number of the remote installation by sending<br/>a special DNS request for the text 'version.bind' in the domain 'chaos'.<br/><br/><p><b>Solution</b>:<br/><br/>It is possible to hide the version number of bind by using the 'version'<br/>directive in the 'options' section in named.conf<br/><br/><p><b>Risk Factor</b> : <br/><br/>None<br/><br/><p><b>Plugin output</b>:<br/><br/>The version of the remote BIND server is : 9.2.4<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10028">10028</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>nbx-dir (2096/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">It was possible to make the remote switch reboot by requesting :<br/><br/>	GET /cgi-bin/view-source?/<br/>	<br/><br/>An attacker may use this flaw to prevent your network from working<br/>properly.<br/><br/><p><b>Solution</b>: see <a target="_blank" href="http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml">http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml</a><br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2000-0984, CVE-2000-0984<br/>BID : 1838, 1838<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10682">10682</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/info.gif" class="alert_img" align="top"></td><td><div class="desc_text">The SSL certificate of the remote service expired Apr 22 23:16:50 2007 GMT!<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=15901">15901</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A SSLv2 server answered on this port<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A web server is running on this port through SSL<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service encrypts traffic using a protocol with known<br/>weaknesses. <br/><br/><p><b>Description</b> :<br/><br/>The remote service accepts connections encrypted using SSL 2.0, which<br/>reportedly suffers from several cryptographic flaws and has been<br/>deprecated for several years.  An attacker may be able to exploit these<br/>issues to conduct man-in-the-middle attacks or decrypt communications<br/>between the affected service and clients. <br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.schneier.com/paper-ssl.pdf">http://www.schneier.com/paper-ssl.pdf</a><br/><br/><p><b>Solution</b>: <br/><br/>Consult the application's documentation to disable SSL 2.0 and use SSL<br/>3.0 or TLS 1.0 instead.<br/><br/><p><b>Risk Factor</b> : <br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=20007">20007</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service supports the use of weak SSL ciphers.<br/><br/><p><b>Description</b> :<br/><br/>The remote host supports the use of SSL ciphers that<br/>offer either weak encryption or no encryption at all.<br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.openssl.org/docs/apps/ciphers.html">http://www.openssl.org/docs/apps/ciphers.html</a><br/><br/><p><b>Solution</b>:<br/><br/>Reconfigure the affected application if possible to avoid use of <br/>weak ciphers.<br/><br/><p><b>Risk Factor</b> : <br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Here is a list of the SSL ciphers supported by the remote server :<br/><br/>  Export Ciphers<br/>    SSLv2<br/>      EXP-RC2-CBC-MD5            Kx=RSA(512)   Au=RSA     Enc=RC2(40)      Mac=MD5    export     <br/>      EXP-RC4-MD5                Kx=RSA(512)   Au=RSA     Enc=RC4(40)      Mac=MD5    export     <br/>    TLSv1<br/>      EXP1024-DES-CBC-SHA        Kx=RSA(1024)  Au=RSA     Enc=DES(56)      Mac=SHA1   export     <br/>      EXP1024-RC2-CBC-MD5        Kx=RSA(1024)  Au=RSA     Enc=RC2(56)      Mac=MD5    export     <br/>      EXP1024-RC4-MD5            Kx=RSA(1024)  Au=RSA     Enc=RC4(56)      Mac=MD5    export     <br/>      EXP1024-RC4-SHA            Kx=RSA(1024)  Au=RSA     Enc=RC4(56)      Mac=SHA1   export     <br/><br/>  Low Strength Ciphers (excluding export, < 128-bit key)<br/>    SSLv2<br/>      DES-CBC-MD5                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=MD5    <br/>      RC4-64-MD5                 Kx=RSA        Au=RSA     Enc=RC4(64)      Mac=MD5    <br/>    SSLv3<br/>      DES-CBC-SHA                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=SHA1   <br/>    TLSv1<br/>      DES-CBC-SHA                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=SHA1   <br/><br/>  Medium Strength Ciphers (128-bit key)<br/>    SSLv2<br/>      RC2-CBC-MD5                Kx=RSA        Au=RSA     Enc=RC2(128)     Mac=MD5    <br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>    SSLv3<br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>      RC4-SHA                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=SHA1   <br/>    TLSv1<br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>      RC4-SHA                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=SHA1   <br/><br/>  High Strength Ciphers (> 128-bit key)<br/>    SSLv2<br/>      DES-CBC3-MD5               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=MD5    <br/>    SSLv3<br/>      DES-CBC3-SHA               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=SHA1   <br/>    TLSv1<br/>      DES-CBC3-SHA               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=SHA1   <br/>      AES128-SHA                 Kx=RSA        Au=RSA     Enc=AES(128)     Mac=SHA1   <br/>      AES256-SHA                 Kx=RSA        Au=RSA     Enc=AES(256)     Mac=SHA1   <br/><br/>The fields above are :<br/><br/>  {OpenSSL ciphername}<br/>  Kx={key exchange}<br/>  Au={authentication}<br/>  Enc={symmetric encryption method}<br/>  Mac={message authentication code}<br/>  {export flag}<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=21643">21643</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote web server type is :<br/><br/>cpsrvd/10.9.6<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10107">10107</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Some information about the remote HTTP configuration can be<br/>extracted.<br/><br/><p><b>Description</b> :<br/><br/>This test gives some information about the remote HTTP protocol - the version<br/>used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...<br/><br/>This test is informational only and does not denote any security problem<br/><br/><p><b>Solution</b>:<br/><br/>None.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None / CVSS Base Score : 0 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Protocol version : HTTP/1.0<br/>SSL : yes<br/>Pipelining : no<br/>Keep-Alive : no<br/>Options allowed : (Not implemented)<br/>Headers :<br/><br/>  WWW-Authenticate: Basic realm="WebMail"<br/>  Connection: close<br/>  Set-Cookie: webmailrelogin=no<br/> path=/<br/>  Server: cpsrvd/10.9.6<br/>  Content-type: text/html<br/>  <br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=24260">24260</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>tcpmux (1/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The service closed the connection after 0 seconds without sending any data<br/>It might be protected by some TCP wrapper<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>ssh (22/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">An ssh server is running on this port<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Remote SSH version : SSH-1.99-OpenSSH_3.6.1p2<br/><br/>Remote SSH supported authentication : publickey,password,keyboard-interactive<br/><br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10267">10267</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote SSH daemon supports the following versions of the<br/>SSH protocol :<br/><br/>  . 1.33<br/>  . 1.5<br/>  . 1.99<br/>  . 2.0<br/><br/><br/>SSHv1 host key fingerprint : 9e:0d:8f:a7:31:0c:49:83:f3:ae:c4:4d:45:d3:80:c7<br/>SSHv2 host key fingerprint : 9c:7a:99:c5:9f:09:b1:cc:d9:de:d1:56:a8:cc:48:91<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10881">10881</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service offers an insecure cryptographic protocol<br/><br/><p><b>Description</b> :<br/><br/>The remote SSH daemon supports connections made<br/>using the version 1.33 and/or 1.5 of the SSH protocol.<br/><br/>These protocols are not completely cryptographically<br/>safe so they should not be used.<br/><br/><p><b>Solution</b>: <br/><br/>Disable compatiblity with version 1 of the protocol.<br/>		<br/><p><b>Risk Factor</b> :<br/><br/>Low / CVSS Base Score : 3 <br/>(AV:R/AC:H/Au:NR/C:P/A:N/I:N/B:C)<br/>CVE : CVE-2001-0361, CVE-2001-0361<br/>BID : 2344, 2344<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10882">10882</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>ftp (21/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">The FTP server does not filter arguments to the ls command. <br/>It is possible to consume all available memory on the machine <br/>by sending <br/>	ls "-w 1000000 -C"<br/>See <a target="_blank" href="http://www.guninski.com/binls.html">http://www.guninski.com/binls.html</a><br/><br/><p><b>Solution</b>: Contact your vendor for a fix<br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2003-0853, CVE-2003-0854, CVE-2003-0853, CVE-2003-0854<br/>BID : 8875, 8875<br/>Other references : CONECTIVA:CLA-2003:768, zone-h:3299<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11912">11912</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">An FTP server is running on this port.<br/>Here is its banner : <br/>220---------- Welcome to Pure-FTPd [TLS] ----------<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>An FTP server is listening on this port<br/><br/><p><b>Description</b> :<br/><br/>It is possible to obtain the banner of the remote FTP server<br/>by connecting to the remote port.<br/><br/><p><b>Risk Factor</b> : <br/><br/>None<br/><br/><p><b>Plugin output</b> :<br/><br/>The remote FTP banner is :<br/>220---------- Welcome to Pure-FTPd [TLS] ----------<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10092">10092</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Anonymous logins are allowed on the remote FTP server.<br/><br/><p><b>Description</b> :<br/><br/>This FTP service allows anonymous logins. If you do not want to share data <br/>with anyone you do not know, then you should deactivate the anonymous account, <br/>since it can only cause troubles.<br/><br/><p><b>Risk Factor</b> :<br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>The content of the remote FTP root is :<br/>drwxr-xr-x    3 0        0            4096 Feb 24  2006 .<br/>drwxr-xr-x    3 0        0            4096 Feb 24  2006 ..<br/>drwxr-xr-x    2 0        0            4096 Feb 24  2006 pub<br/><br/>CVE : CVE-1999-0497, CVE-1999-0497<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10079">10079</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>urd (465/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A SSLv2 server answered on this port<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">An SMTP server is running on this port through SSL<br/>Here is its banner : <br/>220-vanity.twisted-delusions.net ESMTP Exim 4.63 #1 Sat, 05 May 2007 16:32:56 -0500 <br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service encrypts traffic using a protocol with known<br/>weaknesses. <br/><br/><p><b>Description</b> :<br/><br/>The remote service accepts connections encrypted using SSL 2.0, which<br/>reportedly suffers from several cryptographic flaws and has been<br/>deprecated for several years.  An attacker may be able to exploit these<br/>issues to conduct man-in-the-middle attacks or decrypt communications<br/>between the affected service and clients. <br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.schneier.com/paper-ssl.pdf">http://www.schneier.com/paper-ssl.pdf</a><br/><br/><p><b>Solution</b>: <br/><br/>Consult the application's documentation to disable SSL 2.0 and use SSL<br/>3.0 or TLS 1.0 instead.<br/><br/><p><b>Risk Factor</b> : <br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=20007">20007</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Here is the SSLv2 server certificate:<br/>Certificate:<br/>    Data:<br/>        Version: 3 (0x2)<br/>        Serial Number: 0 (0x0)<br/>        Signature Algorithm: md5WithRSAEncryption<br/>        Issuer: C=US, ST=Unknown, L=Unknown, O=Unknown, OU=Unknown, CN=vanity.twisted-delusions.net/emailAddress=ssl@cpanel.net<br/>        Validity<br/>            Not Before: Dec 29 18:48:07 2006 GMT<br/>            Not After : May 15 18:48:07 2034 GMT<br/>        Subject: C=US, ST=Unknown, L=Unknown, O=Unknown, OU=Unknown, CN=vanity.twisted-delusions.net/emailAddress=ssl@cpanel.net<br/>        Subject Public Key Info:<br/>            Public Key Algorithm: rsaEncryption<br/>            RSA Public Key: (1024 bit)<br/>                Modulus (1024 bit):<br/>                    00:e2:64:d2:85:71:99:21:76:11:0b:b4:14:b5:2c:<br/>                    70:09:97:cc:4c:7d:84:8e:0b:f9:de:fe:73:87:ba:<br/>                    b1:b6:42:15:26:92:f8:be:b5:b5:a9:bf:91:3e:e9:<br/>                    9b:35:09:ee:19:69:93:ce:d3:da:2d:4b:1e:a9:51:<br/>                    50:36:87:d4:9c:30:25:3e:00:df:1d:2a:cf:89:c8:<br/>                    a4:23:2a:10:a5:d9:eb:c3:0e:6d:64:d3:7b:3a:0f:<br/>                    62:9b:79:98:6d:7d:78:f4:0f:35:3c:c7:0c:83:32:<br/>                    5a:ca:f7:eb:ff:6b:e4:04:c9:8f:ea:41:30:30:d2:<br/>                    17:0a:ea:c3:63:4d:de:53:e3<br/>                Exponent: 65537 (0x10001)<br/>        X509v3 extensions:<br/>            X509v3 Subject Key Identifier: <br/>                FA:E5:84:70:4B:BA:E4:7E:F1:2C:7C:41:36:C4:10:DD:8C:75:60:E4<br/>            X509v3 Authority Key Identifier: <br/>                keyid:FA:E5:84:70:4B:BA:E4:7E:F1:2C:7C:41:36:C4:10:DD:8C:75:60:E4<br/>                DirName:/C=US/ST=Unknown/L=Unknown/O=Unknown/OU=Unknown/CN=vanity.twisted-delusions.net/emailAddress=ssl@cpanel.net<br/>                serial:00<br/><br/>            X509v3 Basic Constraints: <br/>                CA:TRUE<br/>    Signature Algorithm: md5WithRSAEncryption<br/>        b6:4c:b4:8d:dd:80:f2:77:9c:e9:7c:a2:93:4d:7b:cd:6c:aa:<br/>        e4:fd:00:db:05:86:01:4c:79:77:7d:dd:97:c7:67:55:09:fa:<br/>        06:67:9e:04:36:55:a2:5e:24:6a:cb:4d:9e:a1:85:1a:d7:6e:<br/>        b7:39:17:31:12:ff:85:e7:c5:22:66:ed:47:6e:33:1d:1e:53:<br/>        b4:07:af:ce:7e:48:7d:b2:f5:9a:ec:79:a0:31:18:02:f8:24:<br/>        21:7f:f4:f0:76:23:23:af:af:41:a1:0c:a2:2d:36:b1:c4:a1:<br/>        0c:6f:7c:53:ec:1c:fa:d4:06:b9:70:b3:f7:24:62:fa:d2:f6:<br/>        83:f0<br/>This SSLv2 server also accepts SSLv3 connections.<br/>This SSLv2 server also accepts TLSv1 connections.<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10863">10863</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote service supports the use of weak SSL ciphers.<br/><br/><p><b>Description</b> :<br/><br/>The remote host supports the use of SSL ciphers that<br/>offer either weak encryption or no encryption at all.<br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.openssl.org/docs/apps/ciphers.html">http://www.openssl.org/docs/apps/ciphers.html</a><br/><br/><p><b>Solution</b>:<br/><br/>Reconfigure the affected application if possible to avoid use of <br/>weak ciphers.<br/><br/><p><b>Risk Factor</b> : <br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Here is a list of the SSL ciphers supported by the remote server :<br/><br/>  Export Ciphers<br/>    SSLv2<br/>      EXP-RC2-CBC-MD5            Kx=RSA(512)   Au=RSA     Enc=RC2(40)      Mac=MD5    export     <br/>      EXP-RC4-MD5                Kx=RSA(512)   Au=RSA     Enc=RC4(40)      Mac=MD5    export     <br/>    SSLv3<br/>      EXP-DES-CBC-SHA            Kx=RSA(512)   Au=RSA     Enc=DES(40)      Mac=SHA1   export     <br/>      EXP-RC2-CBC-MD5            Kx=RSA(512)   Au=RSA     Enc=RC2(40)      Mac=MD5    export     <br/>      EXP-RC4-MD5                Kx=RSA(512)   Au=RSA     Enc=RC4(40)      Mac=MD5    export     <br/>    TLSv1<br/>      EXP1024-DES-CBC-SHA        Kx=RSA(1024)  Au=RSA     Enc=DES(56)      Mac=SHA1   export     <br/>      EXP1024-RC2-CBC-MD5        Kx=RSA(1024)  Au=RSA     Enc=RC2(56)      Mac=MD5    export     <br/>      EXP1024-RC4-MD5            Kx=RSA(1024)  Au=RSA     Enc=RC4(56)      Mac=MD5    export     <br/>      EXP1024-RC4-SHA            Kx=RSA(1024)  Au=RSA     Enc=RC4(56)      Mac=SHA1   export     <br/>      EXP-DES-CBC-SHA            Kx=RSA(512)   Au=RSA     Enc=DES(40)      Mac=SHA1   export     <br/>      EXP-RC2-CBC-MD5            Kx=RSA(512)   Au=RSA     Enc=RC2(40)      Mac=MD5    export     <br/>      EXP-RC4-MD5                Kx=RSA(512)   Au=RSA     Enc=RC4(40)      Mac=MD5    export     <br/><br/>  Low Strength Ciphers (excluding export, < 128-bit key)<br/>    SSLv2<br/>      DES-CBC-MD5                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=MD5    <br/>      RC4-64-MD5                 Kx=RSA        Au=RSA     Enc=RC4(64)      Mac=MD5    <br/>    SSLv3<br/>      DES-CBC-SHA                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=SHA1   <br/>    TLSv1<br/>      DES-CBC-SHA                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=SHA1   <br/><br/>  Medium Strength Ciphers (128-bit key)<br/>    SSLv2<br/>      RC2-CBC-MD5                Kx=RSA        Au=RSA     Enc=RC2(128)     Mac=MD5    <br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>    SSLv3<br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>      RC4-SHA                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=SHA1   <br/>    TLSv1<br/>      RC4-MD5                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=MD5    <br/>      RC4-SHA                    Kx=RSA        Au=RSA     Enc=RC4(128)     Mac=SHA1   <br/><br/>  High Strength Ciphers (> 128-bit key)<br/>    SSLv2<br/>      DES-CBC3-MD5               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=MD5    <br/>    SSLv3<br/>      DES-CBC3-SHA               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=SHA1   <br/>    TLSv1<br/>      DES-CBC3-SHA               Kx=RSA        Au=RSA     Enc=3DES(168)    Mac=SHA1   <br/>      AES128-SHA                 Kx=RSA        Au=RSA     Enc=AES(128)     Mac=SHA1   <br/>      AES256-SHA                 Kx=RSA        Au=RSA     Enc=AES(256)     Mac=SHA1   <br/><br/>The fields above are :<br/><br/>  {OpenSSL ciphername}<br/>  Kx={key exchange}<br/>  Au={authentication}<br/>  Enc={symmetric encryption method}<br/>  Mac={message authentication code}<br/>  {export flag}<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=21643">21643</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>An SMTP server is listening on the remote port.<br/><br/><p><b>Description</b> :<br/><br/>The remote host is running a mail (SMTP) server on this port.<br/><br/>Since SMTP servers are the targets of spammers, it is recommended you <br/>disable it if you do not use it.<br/><br/><p><b>Solution</b>: <br/><br/>Disable this service if you do not use it, or filter incoming traffic <br/>to this port.<br/><br/><p><b>Risk Factor</b> : <br/><br/>None<br/><br/><p><b>Plugin output</b> :<br/><br/>Remote SMTP server banner :<br/>220-vanity.twisted-delusions.net ESMTP Exim 4.63 #1 Sat, 05 May 2007 16:32:56 -0500 <br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10263">10263</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">For some reason, we could not send the 42.zip file to this MTA<br/>BID : 3027, 3027<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11036">11036</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>https (443/tcp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote host is using a version of OpenSSL which is<br/>older than 0.9.6m or 0.9.7d<br/><br/>There are several bug in this version of OpenSSL which may allow<br/>an attacker to cause a denial of service against the remote host.<br/><br/><i> Nessus solely relied on the banner of the remote host</i><br/><i> to issue this warning</i><br/><br/><p><b>Solution</b>: Upgrade to version 0.9.6m (0.9.7d) or newer<br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2004-0079, CVE-2004-0081, CVE-2004-0112, CVE-2004-0079, CVE-2004-0081, CVE-2004-0112<br/>BID : 9899, 9899<br/>Other references : IAVA:2004-B-0006<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=12110">12110</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/hole.gif" class="alert_img" align="top"></td><td><div class="desc_text">It was possible to make the remote switch reboot by requesting :<br/><br/>	GET /cgi-bin/view-source?/<br/>	<br/><br/>An attacker may use this flaw to prevent your network from working<br/>properly.<br/><br/><p><b>Solution</b>: see <a target="_blank" href="http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml">http://www.cisco.com/warp/public/707/httpserverquery-pub.shtml</a><br/><p><b>Risk Factor</b> : High<br/>CVE : CVE-2000-0984, CVE-2000-0984<br/>BID : 1838, 1838<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10682">10682</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/info.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote host is using a version of OpenSSL which is<br/>older than 0.9.6j or 0.9.7b<br/><br/>This version is vulnerable to a timing based attack which may<br/>allow an attacker to guess the content of fixed data blocks and<br/>may eventually be able to guess the value of the private RSA key<br/>of the server.<br/><br/>An attacker may use this implementation flaw to sniff the<br/>data going to this host and decrypt some parts of it, as well<br/>as impersonate your server and perform man in the middle attacks.<br/><br/><i> Nessus solely relied on the banner of the remote host</i><br/><i> to issue this warning</i><br/><br/><p><b>See Also</b> : <a target="_blank" href="http://www.openssl.org/news/secadv_20030219.txt">http://www.openssl.org/news/secadv_20030219.txt</a><br/>	   <a target="_blank" href="http://lasecwww.epfl.ch/memo_ssl.shtml">http://lasecwww.epfl.ch/memo_ssl.shtml</a><br/>	   <a target="_blank" href="http://eprint.iacr.org/2003/052/">http://eprint.iacr.org/2003/052/</a><br/><br/><p><b>Solution</b>: Upgrade to version 0.9.6j (0.9.7b) or newer<br/><p><b>Risk Factor</b> : Medium<br/>CVE : CVE-2003-0078, CVE-2003-0131, CVE-2003-0147, CVE-2003-0078, CVE-2003-0131, CVE-2003-0147<br/>BID : 6884, 7148, 6884, 7148<br/>Other references : RHSA:RHSA-2003:101-01, SuSE:SUSE-SA:2003:024<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11267">11267</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">Port is open<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11219">11219</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A web server is running on this port<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10330">10330</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote web server type is :<br/><br/>Apache/1.3.37 (Unix) mod_gzip/1.3.26.1a PHP/5.1.6 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 mod_ssl/2.8.28 OpenSSL/0.9.7a<br/><br/><br/><p><b>Solution</b>: You can set the directive 'ServerTokens Prod' to limit<br/>the information emanating from the server in its response headers.<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10107">10107</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Some information about the remote HTTP configuration can be<br/>extracted.<br/><br/><p><b>Description</b> :<br/><br/>This test gives some information about the remote HTTP protocol - the version<br/>used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc...<br/><br/>This test is informational only and does not denote any security problem<br/><br/><p><b>Solution</b>:<br/><br/>None.<br/><br/><p><b>Risk Factor</b> :<br/><br/>None / CVSS Base Score : 0 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>Protocol version : HTTP/1.1<br/>SSL : no<br/>Pipelining : yes<br/>Keep-Alive : yes<br/>Options allowed : GET, HEAD, OPTIONS, TRACE<br/>Headers :<br/><br/>  Date: Sat, 05 May 2007 21:45:07 GMT<br/>  Server: Apache/1.3.37 (Unix) mod_gzip/1.3.26.1a PHP/5.1.6 mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 mod_ssl/2.8.28 OpenSSL/0.9.7a<br/>  Last-Modified: Fri, 13 Oct 2006 08:48:45 GMT<br/>  ETag: "c9c06a-b2c-452f52ed"<br/>  Accept-Ranges: bytes<br/>  Content-Length: 2860<br/>  Keep-Alive: timeout=15, max=100<br/>  Connection: Keep-Alive<br/>  Content-Type: text/html<br/> charset=iso-8859-5<br/>  <br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=24260">24260</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Debugging functions are enabled on the remote HTTP server.<br/><br/><p><b>Description</b> :<br/><br/>The remote webserver supports the TRACE and/or TRACK methods. TRACE and TRACK<br/>are HTTP methods which are used to debug web server connections.   <br/><br/>It has been shown that servers supporting this method are subject to<br/>cross-site-scripting attacks, dubbed XST for "Cross-Site-Tracing", when<br/>used in conjunction with various weaknesses in browsers. <br/><br/>An attacker may use this flaw to trick your legitimate web users to give<br/>him their credentials. <br/><br/><p><b>Solution</b>:<br/><br/>Disable these methods.<br/><br/><p><b>See Also</b> :<br/><br/><a target="_blank" href="http://www.kb.cert.org/vuls/id/867593">http://www.kb.cert.org/vuls/id/867593</a><br/><br/><p><b>Risk Factor</b> :<br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/><br/><p><b>Solution</b>: <br/>Add the following lines for each virtual host in your configuration file :<br/><br/>    RewriteEngine on<br/>    RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)<br/>    RewriteRule .* - [F]<br/><br/><br/>CVE : CVE-2004-2320, CVE-2004-2320<br/>BID : 9506, 9561, 11604, 9506, 9561, 11604<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11213">11213</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>domain (53/udp)</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/info.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>The remote name server allows recursive queries to be performed<br/>by the host running nessusd.<br/><br/><br/><p><b>Description</b> :<br/><br/>It is possible to query the remote name server for third party names.<br/><br/>If this is your internal nameserver, then forget this warning.<br/><br/>If you are probing a remote nameserver, then it allows anyone<br/>to use it to resolve third parties names (such as www.nessus.org).<br/>This allows hackers to do cache poisoning attacks against this<br/>nameserver.<br/><br/>If the host allows these recursive queries via UDP,<br/>then the host can be used to 'bounce' Denial of Service attacks<br/>against another network or system.<br/><br/><p><b>See Also</b> : <br/><br/><a target="_blank" href="http://www.cert.org/advisories/CA-1997-22.html">http://www.cert.org/advisories/CA-1997-22.html</a><br/><br/><p><b>Solution</b>: <br/><br/>Restrict recursive queries to the hosts that should<br/>use this nameserver (such as those of the LAN connected to it).<br/><br/>If you are using bind 8, you can do this by using the instruction<br/>'allow-recursion' in the 'options' section of your named.conf<br/><br/>If you are using bind 9, you can define a grouping of internal addresses<br/>using the 'acl' command<br/><br/>Then, within the options block, you can explicitly state:<br/>'allow-recursion { hosts_defined_in_acl }'<br/><br/>For more info on Bind 9 administration (to include recursion), see: <br/><a target="_blank" href="http://www.nominum.com/content/documents/bind9arm.pdf">http://www.nominum.com/content/documents/bind9arm.pdf</a><br/><br/>If you are using another name server, consult its documentation.<br/><br/><p><b>Risk Factor</b> :<br/><br/>Medium / CVSS Base Score : 4 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:P/B:I)<br/>CVE : CVE-1999-0024, CVE-1999-0024<br/>BID : 136, 678, 136, 678<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10539">10539</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>Remote DNS server is vulnerable to Cache Snooping attacks.<br/><br/><p><b>Description</b> :<br/><br/>The remote DNS server answers to queries for third party domains which do <br/>not have the recursion bit set.  <br/><br/>This may allow a remote attacker to determine which domains have recently <br/>been resolved via this name server, and therefore which hosts have been<br/>recently visited.<br/><br/>For instance, if an attacker was interested in whether your company utilizes <br/>the online services of a particular financial institution, they would<br/>be able to use this attack to build a statistical model regarding<br/>company usage of aforementioned financial institution.  Of course,<br/>the attack can also be used to find B2B partners, web-surfing patterns,<br/>external mail servers, and more...<br/><br/>For a much more detailed discussion of the potential risks of allowing <br/>DNS cache information to be queried anonymously, please see:<br/><a target="_blank" href="http://community.sidestep.pt/~luis/DNS-Cache-Snooping/DNS_Cache_Snooping_1.1.pdf">http://community.sidestep.pt/~luis/DNS-Cache-Snooping/DNS_Cache_Snooping_1.1.pdf</a><br/><br/><p><b>Risk Factor</b> :<br/><br/>Low / CVSS Base Score : 2 <br/>(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=12217">12217</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">A DNS server is running on this port. If you do not use it, disable it.<br/><br/><p><b>Risk Factor</b> : Low<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11002">11002</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote name server could be fingerprinted as being : ISC BIND 9.2.3<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11951">11951</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>general/icmp</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text"><p><b>Synopsis</b> :<br/><br/>It is possible to determine the exact time set on the remote host.<br/><br/><p><b>Description</b> :<br/><br/>The remote host answers to an ICMP timestamp request. This allows an attacker <br/>to know the date which is set on your machine. <br/><br/>This may help him to defeat all your time based authentication protocols.<br/><br/><p><b>Solution</b>: filter out the ICMP timestamp requests (13), and the outgoing ICMP <br/>timestamp replies (14).<br/><br/><p><b>Risk Factor</b> :<br/><br/>None / CVSS Base Score : 0 <br/>(AV:R/AC:L/Au:NR/C:N/A:N/I:N/B:N)<br/><br/><p><b>Plugin output</b> :<br/><br/>The difference between the local and remote clocks is -7 seconds<br/><br/>CVE : CVE-1999-0524, CVE-1999-0524<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10114">10114</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>general/udp</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">For your information, here is the traceroute from 68.37.220.199 to 70.87.45.130 : <br/>68.37.220.199<br/>?<br/>68.86.219.193<br/>68.86.209.177<br/>68.86.208.5<br/>68.86.90.37<br/>4.71.172.121<br/>4.68.97.62<br/>4.69.132.93<br/>4.69.132.29<br/>4.69.132.85<br/>4.69.134.21<br/>4.68.122.48<br/>4.71.122.2<br/>70.87.253.14<br/>70.87.253.74<br/>67.18.116.69<br/>70.87.45.130<br/><br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=10287">10287</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr><tr><td width="100%"><table width="100%" cellspacing="0" cellpadding="0"><tr><td width="100" height="100%" class="border"><table width="100%" height="100%" class="port_text" cellspacing="0" cellpadding="0"><tr><td><div>general/tcp</div></td></tr><tr><td height="99%"></td></tr></table></td><td class="left_open_border" height="100%"><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote host, when queried on open ports, replies with differing TTL values.  This could be an <br/>indicator that a transparent proxy is on the way, or that this host is a forwarding router, <br/>honeypot, etc...<br/><br/>An attacker may use this information to find critical systems on your network <br/><p><b>Solution</b> Contact vendor for information on closing up this information leak. <br/><br/><p><b>Risk Factor</b> : Low<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11858">11858</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">70.87.45.130 resolves as 82.2d.5746.static.theplanet.com.<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=12053">12053</a><br><br></div></td></tr></table></td></tr><tr><td><img src="images/pixel.gif" height="3"></td></tr><tr><td><table width="100%" height="100%" cellspacing="0" cellpadding="0"><tr><td width="1%" valign="top"><img src="images/note.gif" class="alert_img" align="top"></td><td><div class="desc_text">The remote host is running one of these operating systems : <br/>Linux Kernel 2.4<br/>Linux Kernel 2.6<br/>Plugin ID : <a target="_blank" href="http://www.nessus.org/plugins/index.php?view=single&amp;id=11936">11936</a><br><br></div></td></tr></table></td></tr></table></td></tr></table></td></tr><tr><td height="5"></td></tr></table><table width="100%"><tr><td align="right" height="40"></td></tr></table><table><tr><td></td></tr></table></body>