pop3s (995/tcp)
Port is open
Plugin ID : 11219
A SSLv2 server answered on this port
Plugin ID : 10330
A pop3 server is running on this port
Plugin ID : 10330
Synopsis :
The remote service encrypts traffic using a protocol with known
weaknesses.
Description :
The remote service accepts connections encrypted using SSL 2.0, which
reportedly suffers from several cryptographic flaws and has been
deprecated for several years. An attacker may be able to exploit these
issues to conduct man-in-the-middle attacks or decrypt communications
between the affected service and clients.
See Also :
http://www.schneier.com/paper-ssl.pdf
Solution:
Consult the application's documentation to disable SSL 2.0 and use SSL
3.0 or TLS 1.0 instead.
Risk Factor :
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)
Plugin ID : 20007
Synopsis :
A POP server is listening on the remote port
Description :
The remote host is running a POP server.
Solution:
Disable this service if you do not use it.
Risk Factor :
None
Plugin output :
Remote POP server banner :
+OK Hello there.
Plugin ID : 10185
imaps (993/tcp)
Port is open
Plugin ID : 11219
A SSLv2 server answered on this port
Plugin ID : 10330
An IMAP server is running on this port through SSL
Plugin ID : 10330
Synopsis :
The remote service encrypts traffic using a protocol with known
weaknesses.
Description :
The remote service accepts connections encrypted using SSL 2.0, which
reportedly suffers from several cryptographic flaws and has been
deprecated for several years. An attacker may be able to exploit these
issues to conduct man-in-the-middle attacks or decrypt communications
between the affected service and clients.
See Also :
http://www.schneier.com/paper-ssl.pdf
Solution:
Consult the application's documentation to disable SSL 2.0 and use SSL
3.0 or TLS 1.0 instead.
Risk Factor :
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)
Plugin ID : 20007
Synopsis :
An IMAP server is running on the remote host.
Description :
An IMAP (Internet Message Access Protocol) server is
installed and running on the remote host.
Risk Factor :
None
Plugin output :
The remote imap server banner is :
* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE AUTH=PLAIN ACL ACL2=UNION] Courier-IMAP ready. Copyright 1998-2005 Double Precision, Inc. See COPYING for distribution information.
Plugin ID : 11414
mysql (3306/tcp)
Port is open
Plugin ID : 11219
Synopsis :
A Database server is listening on the remote port.
Description :
The remote host is running MySQL, an open-source Database server. It
is possible to extract the version number of the remote installation
by receiving the server greeting.
Solution:
Restrict access to the database to allowed IPs only.
Risk Factor :
None
Plugin output :
The remote MySQL version is 4.1.20-standard
Plugin ID : 10719
imap (143/tcp)
Port is open
Plugin ID : 11219
An IMAP server is running on this port
Plugin ID : 10330
Synopsis :
An IMAP server is running on the remote host.
Description :
An IMAP (Internet Message Access Protocol) server is
installed and running on the remote host.
Risk Factor :
None
Plugin output :
The remote imap server banner is :
* OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2005 Double Precision, Inc. See COPYING for distribution information.
Plugin ID : 11414
pop3 (110/tcp)
Port is open
Plugin ID : 11219
A pop3 server is running on this port
Plugin ID : 10330
Synopsis :
A POP server is listening on the remote port
Description :
The remote host is running a POP server.
Solution:
Disable this service if you do not use it.
Risk Factor :
None
Plugin output :
Remote POP server banner :
+OK Hello there.
Plugin ID : 10185
http (80/tcp)
The remote host is using a version of OpenSSL which is
older than 0.9.6m or 0.9.7d
There are several bug in this version of OpenSSL which may allow
an attacker to cause a denial of service against the remote host.
Nessus solely relied on the banner of the remote host
to issue this warning
Solution: Upgrade to version 0.9.6m (0.9.7d) or newer
Risk Factor : High
CVE : CVE-2004-0079, CVE-2004-0081, CVE-2004-0112
BID : 9899
Other references : IAVA:2004-B-0006
Plugin ID : 12110
The remote host is using the Apache mod_frontpage module.
mod_frontpage older than 1.6.1 is vulnerable to a buffer
overflow which may allow an attacker to gain root access.
Since Nessus was not able to remotely determine the version
of mod_frontage you are running, you are advised to manually
check which version you are running as this might be a false
positive.
If you want the remote server to be remotely secure, we advise
you do not use this module at all.
Solution: Disable this module
Risk Factor : High
CVE : CVE-2002-0427
BID : 4251
Plugin ID : 11303
The remote host is using a version of OpenSSL which is
older than 0.9.6j or 0.9.7b
This version is vulnerable to a timing based attack which may
allow an attacker to guess the content of fixed data blocks and
may eventually be able to guess the value of the private RSA key
of the server.
An attacker may use this implementation flaw to sniff the
data going to this host and decrypt some parts of it, as well
as impersonate your server and perform man in the middle attacks.
Nessus solely relied on the banner of the remote host
to issue this warning
See Also : http://www.openssl.org/news/secadv_20030219.txt
http://lasecwww.epfl.ch/memo_ssl.shtml
http://eprint.iacr.org/2003/052/
Solution: Upgrade to version 0.9.6j (0.9.7b) or newer
Risk Factor : Medium
CVE : CVE-2003-0078, CVE-2003-0131, CVE-2003-0147
BID : 6884, 7148
Other references : RHSA:RHSA-2003:101-01, SuSE:SUSE-SA:2003:024
Plugin ID : 11267
Port is open
Plugin ID : 11219
A web server is running on this port
Plugin ID : 10330
Directory index found at /sys_cpanel/images/
Directory index found at /sys_cpanel/
Directory index found at /sys_cpanel/css/
Directory index found at /sys_cpanel/html/
Plugin ID : 10662
The remote web server type is :
Apache/1.3.37 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.4.7 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a
Solution: You can set the directive 'ServerTokens Prod' to limit
the information emanating from the server in its response headers.
Plugin ID : 10107
nbx-ser (2095/tcp)
Port is open
Plugin ID : 11219
A web server is running on this port
Plugin ID : 10330
The remote web server type is :
cpsrvd/11.2.2
Plugin ID : 10107
eli (2087/tcp)
Port is open
Plugin ID : 11219
A SSLv2 server answered on this port
Plugin ID : 10330
A web server is running on this port through SSL
Plugin ID : 10330
Synopsis :
The remote service encrypts traffic using a protocol with known
weaknesses.
Description :
The remote service accepts connections encrypted using SSL 2.0, which
reportedly suffers from several cryptographic flaws and has been
deprecated for several years. An attacker may be able to exploit these
issues to conduct man-in-the-middle attacks or decrypt communications
between the affected service and clients.
See Also :
http://www.schneier.com/paper-ssl.pdf
Solution:
Consult the application's documentation to disable SSL 2.0 and use SSL
3.0 or TLS 1.0 instead.
Risk Factor :
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)
Plugin ID : 20007
The remote web server type is :
cpsrvd/11.2.2
Plugin ID : 10107
gnunet (2086/tcp)
Port is open
Plugin ID : 11219
A web server is running on this port
Plugin ID : 10330
The remote web server type is :
cpsrvd/11.2.2
Plugin ID : 10107
radsec (2083/tcp)
Port is open
Plugin ID : 11219
A SSLv2 server answered on this port
Plugin ID : 10330
A web server is running on this port through SSL
Plugin ID : 10330
Synopsis :
The remote service encrypts traffic using a protocol with known
weaknesses.
Description :
The remote service accepts connections encrypted using SSL 2.0, which
reportedly suffers from several cryptographic flaws and has been
deprecated for several years. An attacker may be able to exploit these
issues to conduct man-in-the-middle attacks or decrypt communications
between the affected service and clients.
See Also :
http://www.schneier.com/paper-ssl.pdf
Solution:
Consult the application's documentation to disable SSL 2.0 and use SSL
3.0 or TLS 1.0 instead.
Risk Factor :
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)
Plugin ID : 20007
The remote web server type is :
cpsrvd/11.2.2
Plugin ID : 10107
domain (53/tcp)
Port is open
Plugin ID : 11219
A DNS server is running on this port. If you do not use it, disable it.
Risk Factor : Low
Plugin ID : 11002
Synopsis :
It is possible to obtain the version number of the remote DNS server.
Description :
The remote host is running BIND, an open-source DNS server. It is possible
to extract the version number of the remote installation by sending
a special DNS request for the text 'version.bind' in the domain 'chaos'.
Solution:
It is possible to hide the version number of bind by using the 'version'
directive in the 'options' section in named.conf
Risk Factor :
None
Plugin output:
The version of the remote BIND server is : 9.2.4
Plugin ID : 10028
nbx-dir (2096/tcp)
Port is open
Plugin ID : 11219
A SSLv2 server answered on this port
Plugin ID : 10330
A web server is running on this port through SSL
Plugin ID : 10330
Synopsis :
The remote service encrypts traffic using a protocol with known
weaknesses.
Description :
The remote service accepts connections encrypted using SSL 2.0, which
reportedly suffers from several cryptographic flaws and has been
deprecated for several years. An attacker may be able to exploit these
issues to conduct man-in-the-middle attacks or decrypt communications
between the affected service and clients.
See Also :
http://www.schneier.com/paper-ssl.pdf
Solution:
Consult the application's documentation to disable SSL 2.0 and use SSL
3.0 or TLS 1.0 instead.
Risk Factor :
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)
Plugin ID : 20007
The remote web server type is :
cpsrvd/11.2.2
Plugin ID : 10107
smtp (25/tcp)
Port is open
Plugin ID : 11219
This port was detected as being open by a port scanner but is now closed.
This service might have been crashed by a port scanner or by a plugin
Plugin ID : 10919
ssh (22/tcp)
Port is open
Plugin ID : 11219
An ssh server is running on this port
Plugin ID : 10330
Remote SSH version : SSH-2.0-OpenSSH_3.9p1
Remote SSH supported authentication : publickey,gssapi-with-mic,password
Plugin ID : 10267
The remote SSH daemon supports the following versions of the
SSH protocol :
. 1.99
. 2.0
SSHv2 host key fingerprint : 75:92:80:6f:1c:09:7c:7d:2c:56:4d:6b:cc:8c:45:3b
Plugin ID : 10881
ftp (21/tcp)
Port is open
Plugin ID : 11219
An FTP server is running on this port.
Here is its banner :
220---------- Welcome to Pure-FTPd [TLS] ----------
Plugin ID : 10330
Synopsis :
An FTP server is listening on this port
Description :
It is possible to obtain the banner of the remote FTP server
by connecting to the remote port.
Risk Factor :
None
Plugin output :
The remote FTP banner is :
220---------- Welcome to Pure-FTPd [TLS] ----------
Plugin ID : 10092
urd (465/tcp)
Port is open
Plugin ID : 11219
A SSLv2 server answered on this port
Plugin ID : 10330
An SMTP server is running on this port through SSL
Here is its banner :
220-basin.myserverhosts.com ESMTP Exim 4.68 #1 Tue, 06 Nov 2007 17:54:42 -0600
Plugin ID : 10330
Synopsis :
The remote service encrypts traffic using a protocol with known
weaknesses.
Description :
The remote service accepts connections encrypted using SSL 2.0, which
reportedly suffers from several cryptographic flaws and has been
deprecated for several years. An attacker may be able to exploit these
issues to conduct man-in-the-middle attacks or decrypt communications
between the affected service and clients.
See Also :
http://www.schneier.com/paper-ssl.pdf
Solution:
Consult the application's documentation to disable SSL 2.0 and use SSL
3.0 or TLS 1.0 instead.
Risk Factor :
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)
Plugin ID : 20007
Synopsis :
An SMTP server is listening on the remote port.
Description :
The remote host is running a mail (SMTP) server on this port.
Since SMTP servers are the targets of spammers, it is recommended you
disable it if you do not use it.
Solution:
Disable this service if you do not use it, or filter incoming traffic
to this port.
Risk Factor :
None
Plugin output :
Remote SMTP server banner :
220-basin.myserverhosts.com ESMTP Exim 4.68 #1 Tue, 06 Nov 2007 17:54:42 -0600
Plugin ID : 10263
https (443/tcp)
The remote host is using a version of OpenSSL which is
older than 0.9.6m or 0.9.7d
There are several bug in this version of OpenSSL which may allow
an attacker to cause a denial of service against the remote host.
Nessus solely relied on the banner of the remote host
to issue this warning
Solution: Upgrade to version 0.9.6m (0.9.7d) or newer
Risk Factor : High
CVE : CVE-2004-0079, CVE-2004-0081, CVE-2004-0112
BID : 9899
Other references : IAVA:2004-B-0006
Plugin ID : 12110
The remote host is using the Apache mod_frontpage module.
mod_frontpage older than 1.6.1 is vulnerable to a buffer
overflow which may allow an attacker to gain root access.
Since Nessus was not able to remotely determine the version
of mod_frontage you are running, you are advised to manually
check which version you are running as this might be a false
positive.
If you want the remote server to be remotely secure, we advise
you do not use this module at all.
Solution: Disable this module
Risk Factor : High
CVE : CVE-2002-0427
BID : 4251
Plugin ID : 11303
The remote host is using a version of OpenSSL which is
older than 0.9.6j or 0.9.7b
This version is vulnerable to a timing based attack which may
allow an attacker to guess the content of fixed data blocks and
may eventually be able to guess the value of the private RSA key
of the server.
An attacker may use this implementation flaw to sniff the
data going to this host and decrypt some parts of it, as well
as impersonate your server and perform man in the middle attacks.
Nessus solely relied on the banner of the remote host
to issue this warning
See Also : http://www.openssl.org/news/secadv_20030219.txt
http://lasecwww.epfl.ch/memo_ssl.shtml
http://eprint.iacr.org/2003/052/
Solution: Upgrade to version 0.9.6j (0.9.7b) or newer
Risk Factor : Medium
CVE : CVE-2003-0078, CVE-2003-0131, CVE-2003-0147
BID : 6884, 7148
Other references : RHSA:RHSA-2003:101-01, SuSE:SUSE-SA:2003:024
Plugin ID : 11267
Port is open
Plugin ID : 11219
A SSLv2 server answered on this port
Plugin ID : 10330
A web server is running on this port through SSL
Plugin ID : 10330
Synopsis :
The remote service encrypts traffic using a protocol with known
weaknesses.
Description :
The remote service accepts connections encrypted using SSL 2.0, which
reportedly suffers from several cryptographic flaws and has been
deprecated for several years. An attacker may be able to exploit these
issues to conduct man-in-the-middle attacks or decrypt communications
between the affected service and clients.
See Also :
http://www.schneier.com/paper-ssl.pdf
Solution:
Consult the application's documentation to disable SSL 2.0 and use SSL
3.0 or TLS 1.0 instead.
Risk Factor :
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)
Plugin ID : 20007
Synopsis :
The remote service supports the use of weak SSL ciphers.
Description :
The remote host supports the use of SSL ciphers that
offer either weak encryption or no encryption at all.
See Also :
http://www.openssl.org/docs/apps/ciphers.html
Solution:
Reconfigure the affected application if possible to avoid use of
weak ciphers.
Risk Factor :
Low / CVSS Base Score : 2
(AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N)
Plugin output :
Here is a list of the SSL ciphers supported by the remote server :
Export Ciphers
SSLv2
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export
SSLv3
EXP-EDH-RSA-DES-CBC-SHA Kx=DH(512) Au=RSA Enc=DES(40) Mac=SHA1 export
EXP-DES-CBC-SHA Kx=RSA(512) Au=RSA Enc=DES(40) Mac=SHA1 export
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export
TLSv1
EXP-EDH-RSA-DES-CBC-SHA Kx=DH(512) Au=RSA Enc=DES(40) Mac=SHA1 export
EXP1024-DES-CBC-SHA Kx=RSA(1024) Au=RSA Enc=DES(56) Mac=SHA1 export
EXP1024-RC2-CBC-MD5 Kx=RSA(1024) Au=RSA Enc=RC2(56) Mac=MD5 export
EXP1024-RC4-MD5 Kx=RSA(1024) Au=RSA Enc=RC4(56) Mac=MD5 export
EXP1024-RC4-SHA Kx=RSA(1024) Au=RSA Enc=RC4(56) Mac=SHA1 export
EXP-DES-CBC-SHA Kx=RSA(512) Au=RSA Enc=DES(40) Mac=SHA1 export
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export
Low Strength Ciphers (excluding export, < 128-bit key)
SSLv2
DES-CBC-MD5 Kx=RSA Au=RSA Enc=DES(56) Mac=MD5
RC4-64-MD5 Kx=RSA Au=RSA Enc=RC4(64) Mac=MD5
SSLv3
EDH-RSA-DES-CBC-SHA Kx=DH Au=RSA Enc=DES(56) Mac=SHA1
DES-CBC-SHA Kx=RSA Au=RSA Enc=DES(56) Mac=SHA1
TLSv1
EDH-RSA-DES-CBC-SHA Kx=DH Au=RSA Enc=DES(56) Mac=SHA1
DES-CBC-SHA Kx=RSA Au=RSA Enc=DES(56) Mac=SHA1
Medium Strength Ciphers (128-bit key)
SSLv2
RC2-CBC-MD5 Kx=RSA Au=RSA Enc=RC2(128) Mac=MD5
RC4-MD5 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5
SSLv3
RC4-MD5 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5
RC4-SHA Kx=RSA Au=RSA Enc=RC4(128) Mac=SHA1
TLSv1
RC4-MD5 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5
RC4-SHA Kx=RSA Au=RSA Enc=RC4(128) Mac=SHA1
High Strength Ciphers (> 128-bit key)
SSLv2
DES-CBC3-MD5 Kx=RSA Au=RSA Enc=3DES(168) Mac=MD5
SSLv3
EDH-RSA-DES-CBC3-SHA Kx=DH Au=RSA Enc=3DES(168) Mac=SHA1
DES-CBC3-SHA Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
TLSv1
EDH-RSA-DES-CBC3-SHA Kx=DH Au=RSA Enc=3DES(168) Mac=SHA1
DHE-RSA-AES128-SHA Kx=DH Au=RSA Enc=AES(128) Mac=SHA1
DHE-RSA-AES256-SHA Kx=DH Au=RSA Enc=AES(256) Mac=SHA1
DES-CBC3-SHA Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
AES128-SHA Kx=RSA Au=RSA Enc=AES(128) Mac=SHA1
AES256-SHA Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1
The fields above are :
{OpenSSL ciphername}
Kx={key exchange}
Au={authentication}
Enc={symmetric encryption method}
Mac={message authentication code}
{export flag}
Plugin ID : 21643
Here is the SSLv2 server certificate:
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 0 (0x0)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=GB, ST=Berkshire, L=Newbury, O=My Company Ltd, CN=basin.myserverhosts.com
Validity
Not Before: Apr 30 12:19:34 2007 GMT
Not After : Apr 29 12:19:34 2008 GMT
Subject: C=GB, ST=Berkshire, L=Newbury, O=My Company Ltd, CN=basin.myserverhosts.com
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:dc:60:6e:b3:58:9c:c0:47:70:4c:e9:8a:dc:5e:
f4:1f:04:aa:46:f6:05:19:8b:6b:48:5c:fb:e9:f5:
47:d1:84:a2:7f:66:71:b1:72:d6:1c:ff:06:2a:9e:
82:12:67:1e:c5:c1:42:35:6d:d1:5c:a4:e9:17:90:
3d:32:e1:38:6a:53:70:15:10:15:04:72:12:f3:6f:
16:ae:9e:8f:e9:be:77:9c:6d:80:f9:63:6a:ec:f4:
2d:be:93:f4:6b:7d:28:8d:b2:7a:d9:35:e8:3d:e8:
8e:74:c8:a7:93:de:51:e9:95:89:5f:fa:31:3a:41:
29:7c:b6:a2:9b:0c:00:2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D2:6E:A9:9F:82:E1:48:0E:3B:69:46:B8:F9:C7:5F:89:A9:75:DD
X509v3 Authority Key Identifier:
keyid:2B:D2:6E:A9:9F:82:E1:48:0E:3B:69:46:B8:F9:C7:5F:89:A9:75:DD
DirName:/C=GB/ST=Berkshire/L=Newbury/O=My Company Ltd/CN=basin.myserverhosts.com
serial:00
X509v3 Basic Constraints:
CA:TRUE
Signature Algorithm: sha1WithRSAEncryption
48:7e:5e:6f:06:c9:01:a6:22:95:1c:c7:2a:f0:a6:7e:29:54:
b2:0f:cc:6c:70:0d:72:b0:d1:7a:cd:f3:7a:25:2b:92:e6:62:
6c:29:ab:6f:d4:78:5c:90:90:22:79:46:9b:26:18:4b:e7:e8:
35:a4:7a:51:1f:f4:56:c4:67:3c:01:d5:04:49:dd:c4:a1:62:
66:a0:a4:bf:35:c9:3f:f9:0e:06:d0:95:56:51:5b:e7:fa:43:
92:f4:dc:37:c4:73:4e:db:30:9f:1a:a6:e8:83:0a:01:89:3f:
82:12:73:ae:63:3a:5b:82:b7:3b:a5:23:55:2d:a6:99:ba:a7:
17:27
This SSLv2 server also accepts SSLv3 connections.
This SSLv2 server also accepts TLSv1 connections.
Plugin ID : 10863
The following directories were discovered:
/cgi-bin, /cgi-sys
While this is not, in and of itself, a bug, you should manually inspect
these directories to ensure that they are in compliance with company
security standards
Other references : OWASP:OWASP-CM-006
Plugin ID : 11032
The remote web server type is :
Apache/1.3.37 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.4.7 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a
Solution: You can set the directive 'ServerTokens Prod' to limit
the information emanating from the server in its response headers.
Plugin ID : 10107
infowave (2082/tcp)
Port is open
Plugin ID : 11219
A web server is running on this port
Plugin ID : 10330
The remote web server type is :
cpsrvd/11.2.2
Plugin ID : 10107
domain (53/udp)
A DNS server is running on this port. If you do not use it, disable it.
Risk Factor : Low
Plugin ID : 11002
The remote name server could be fingerprinted as being : ISC BIND 9.2.3
Plugin ID : 11951
general/udp
For your information, here is the traceroute from 192.168.0.139 to 74.200.205.186 :
192.168.0.139
192.168.0.1
?
192.168.249.94
192.168.15.125
192.168.15.121
192.168.15.117
192.168.15.105
208.48.250.62
208.48.250.61
64.209.102.46
216.52.128.78
216.52.130.166
74.200.193.5
74.200.205.186
Plugin ID : 10287
general/tcp
74.200.205.186 resolves as basin.myserverhosts.com.
Plugin ID : 12053
Information about this scan :
Nessus version : 3.0.5
Plugin feed version : 200609281415
Type of plugin feed : Registered (7 days delay)
Scanner IP : 192.168.0.139
Port scanner(s) : synscan
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Max hosts : 20
Max checks : 4
Scan Start Date : 2007/11/6 21:00
Scan duration : 1467 sec
Plugin ID : 19506