Metasploit Report

Download as pdf or txt
Download as pdf or txt
You are on page 1of 7

Nessus Report

Nessus Scan Report


27/Feb/2015:10:11:15
Nessus Home: Commercial use of the report is prohibited
Any time Nessus is used in a commercial environment you MUST maintain an active
subscription to the Nessus Feed in order to be compliant with our license agreement:
http://www.tenable.com/products/nessus

Table Of Contents
Hosts Summary (Executive).................................................................................................3

192.168.1.7.................................................................................................................................................................. 4

Hosts Summary (Executive)

192.168.1.7
Summary
Critical

High

Medium

Low

Info

Total

16

64

100

Details
Severity

Plugin Id

Name

Critical (10.0)

10380

rsh Unauthenticated Access (via finger Information)

Critical (10.0)

25216

Samba NDR MS-RPC Request Heap-Based Remote Buffer Overflow

Critical (10.0)

32314

Debian OpenSSH/OpenSSL Package Random Number Generator


Weakness

Critical (10.0)

33850

Unsupported Unix Operating System

Critical (10.0)

46882

UnrealIRCd Backdoor Detection

Critical (10.0)

51988

Rogue Shell Backdoor Detection

Critical (10.0)

55523

vsftpd Smiley Face Backdoor

Critical (10.0)

61708

VNC Server 'password' Password

High (9.4)

33447

Multiple Vendor DNS Query ID Field Prediction Cache Poisoning

High (7.5)

10205

rlogin Service Detection

High (7.5)

10245

rsh Service Detection

High (7.5)

10481

MySQL Unpassworded Account Check

High (7.5)

42411

Microsoft Windows SMB Shares Unprivileged Access

Medium (6.4)

11356

NFS Exported Share Information Disclosure

Medium (6.4)

51192

SSL Certificate Cannot Be Trusted

Medium (6.4)

57582

SSL Self-Signed Certificate

Medium (5.0)

10079

Anonymous FTP Enabled

Medium (5.0)

12217

DNS Server Cache Snooping Remote Information Disclosure

Medium (5.0)

15901

SSL Certificate Expiry

Medium (5.0)

20007

SSL Version 2 and 3 Protocol Detection

Medium (5.0)

42256

NFS Shares World Readable

Medium (5.0)

45411

SSL Certificate with Wrong Hostname

Medium (5.0)

57608

SMB Signing Required

Medium (4.3)

11213

HTTP TRACE / TRACK Methods Allowed

Medium (4.3)

26928

SSL Weak Cipher Suites Supported

Medium (4.3)

42873

SSL Medium Strength Cipher Suites Supported

Medium (4.3)

57792

Apache HTTP Server httpOnly Cookie Information Disclosure

Medium (4.3)

78479

SSLv3 Padding Oracle On Downgraded Legacy Encryption Vulnerability


(POODLE)

Medium (4.0)

52611

SMTP Service STARTTLS Plaintext Command Injection

Low (2.6)

10407

X Server Detection

Low (2.6)

31705

SSL Anonymous Cipher Suites Supported

Low (2.6)

34324

FTP Supports Clear Text Authentication

Low (2.6)

42263

Unencrypted Telnet Server

Low (2.6)

65821

SSL RC4 Cipher Suites Supported

Low (2.6)

70658

SSH Server CBC Mode Ciphers Enabled

Low (2.6)

71049

SSH Weak MAC Algorithms Enabled

Info

10028

DNS Server BIND version Directive Remote Version Detection

Info

10092

FTP Server Detection

Info

10107

HTTP Server Type and Version

Info

10114

ICMP Timestamp Request Remote Date Disclosure

Info

10150

Windows NetBIOS / SMB Remote Host Information Disclosure

Info

10223

RPC portmapper Service Detection

Info

10263

SMTP Server Detection

Info

10267

SSH Server Type and Version Information

Info

10281

Telnet Server Detection

Info

10287

Traceroute Information

Info

10342

VNC Software Detection

Info

10394

Microsoft Windows SMB Log In Possible

Info

10395

Microsoft Windows SMB Shares Enumeration

Info

10397

Microsoft Windows SMB LanMan Pipe Server Listing Disclosure

Info

10437

NFS Share Export List

Info

10719

MySQL Server Detection

Info

10785

Microsoft Windows SMB NativeLanManager Remote System Information


Disclosure

Info

10859

Microsoft Windows SMB LsaQueryInformationPolicy Function SID


Enumeration

Info

10860

SMB Use Host SID to Enumerate Local Users

Info

10863

SSL Certificate Information

Info

10881

SSH Protocol Versions Supported

Info

11002

DNS Server Detection

Info

11011

Microsoft Windows SMB Service Detection

Info

11111

RPC Services Enumeration

Info

11153

Service Detection (HELP Request)

Info

11154

Unknown Service Detection: Banner Retrieval

Info

11156

IRC Daemon Version Detection

Info

11219

Nessus SYN scanner

Info

11424

WebDAV Detection

Info

11819

TFTP Daemon Detection

Info

11936

OS Identification

Info

17651

Microsoft Windows SMB : Obtains the Password Policy

Info

18261

Apache Banner Linux Distribution Disclosure

Info

19288

VNC Server Security Type Detection

Info

19506

Nessus Scan Information

Info

21643

SSL Cipher Suites Supported

Info

22227

RMI Registry Detection

Info

22964

Service Detection

Info

24260

HyperText Transfer Protocol (HTTP) Information

Info

25220

TCP/IP Timestamps Supported

Info

25240

Samba Server Detection

Info

26024

PostgreSQL Server Detection

Info

35371

DNS Server hostname.bind Map Hostname Disclosure

Info

35716

Ethernet Card Manufacturer Detection

Info

39520

Backported Security Patch Detection (SSH)

Info

39521

Backported Security Patch Detection (WWW)

Info

42088

SMTP Service STARTTLS Command Support

Info

45410

SSL Certificate commonName Mismatch

Info

45590

Common Platform Enumeration (CPE)

Info

48243

PHP Version

Info

50845

OpenSSL Detection

Info

51891

SSL Session Resume Supported

Info

52703

vsftpd Detection

Info

53335

RPC portmapper (TCP)

Info

54615

Device Type

Info

56984

SSL / TLS Versions Supported

Info

57041

SSL Perfect Forward Secrecy Cipher Suites Supported

Info

60119

Microsoft Windows SMB Share Permissions Enumeration

Info

62563

SSL Compression Methods Supported

Info

65792

VNC Server Unencrypted Communication Detection

Info

66334

Patch Report

Info

70544

SSL Cipher Block Chaining Cipher Suites Supported

Info

70657

SSH Algorithms and Languages Supported

Info

72779

DNS Server Version Detection

You might also like