List of PlugIn IDs

Plugin ID: 10395

Microsoft Windows SMB Shares Enumeration

Synopsis
It is possible to enumerate remote network shares.

List of Hosts

192.168.1.30

Plugin Output

Here are the SMB shares available on the remote host when logged as dtwzdicm:

- IPC$
- media
- backup

Plugin Output

Here are the SMB shares available on the remote host when logged as unwnbojz:

- IPC$
- share
- iTunesMusic
- ADMIN$
- C$

Description
By connecting to the remote host, Nessus was able to enumerate
the network share names.

Solution
N/A

Risk Factor
None

Plugin ID: 33276

Enumerate MAC Addresses via SSH

Synopsis
This plugin enumerates MAC addresses on a remote host.

List of Hosts

192.168.1.13

Plugin Output

The following MAC addresses exist on the remote host :

- 00:A0:CC:3D:B3:BA (interface eth0)
- 00:17:31:03:14:1F (interface eth1)

Description
By connecting to the remote host via SSH with the supplied
credentials, this plugin enumerates MAC addresses.

Solution
Disable any unused interfaces.

Risk Factor
None

Plugin ID: 10940

Windows Terminal Services Enabled

Synopsis
The remote Windows host has Terminal Services enabled.

List of Hosts

192.168.1.215

Description
Terminal Services allows a Windows user to remotely obtain a graphical
login (and therefore act as a local user on the remote host).

If an attacker gains a valid login and password, he may be able to use
this service to gain further access on the remote host. An attacker
may also use this service to mount a dictionary attack against the
remote host to try to log in remotely.

Note that RDP (the Remote Desktop Protocol) is vulnerable to
Man-in-the-middle attacks, making it easy for attackers to steal the
credentials of legitimate users by impersonating the Windows server.

Solution
Disable Terminal Services if you do not use it, and do not allow this
service to run across the Internet.

Risk Factor
None

Plugin ID: 10386

Web Server No 404 Error Code Check

Synopsis
The remote web server does not return 404 error codes.

List of Hosts

192.168.1.13

Plugin Output
The following title tag will be used :
200 Unauthorized

Description
The remote web server is configured such that it does not return '404
Not Found' error codes when a nonexistent file is requested, perhaps
returning instead a site map, search page or authentication page.

Nessus has enabled some counter measures for this. However, they
might be insufficient. If a great number of security holes are
produced for this port, they might not all be accurate.

Solution
n/a

Risk Factor
None

Plugin ID: 10386

Web Server No 404 Error Code Check

Synopsis
The remote web server does not return 404 error codes.

List of Hosts

192.168.1.79

Plugin Output
The following title tag will be used :
Redirect

Plugin Output

CGI scanning will be disabled for this host.

Description
The remote web server is configured such that it does not return '404
Not Found' error codes when a nonexistent file is requested, perhaps
returning instead a site map, search page or authentication page.

Nessus has enabled some counter measures for this. However, they
might be insufficient. If a great number of security holes are
produced for this port, they might not all be accurate.

Solution
n/a

Risk Factor
None

Plugin ID: 10386

Web Server No 404 Error Code Check

Synopsis
The remote web server does not return 404 error codes.

List of Hosts

192.168.1.79

Plugin Output
The following title tag will be used :
Redirect

Description
The remote web server is configured such that it does not return '404
Not Found' error codes when a nonexistent file is requested, perhaps
returning instead a site map, search page or authentication page.

Nessus has enabled some counter measures for this. However, they
might be insufficient. If a great number of security holes are
produced for this port, they might not all be accurate.

Solution
n/a

Risk Factor
None

Plugin ID: 25701

LDAP Crafted Search Request Server Information Disclosure

Synopsis
It is possible to discover information about the remote LDAP server.

List of Hosts

192.168.1.180

Plugin Output
[+]-namingContexts:
| DC=tx,DC=hec,DC=net
| CN=Configuration,DC=tx,DC=hec,DC=net
| CN=Schema,CN=Configuration,DC=tx,DC=hec,DC=net
| DC=DomainDnsZones,DC=tx,DC=hec,DC=net
| DC=ForestDnsZones,DC=tx,DC=hec,DC=net

Description
By sending a search request with a filter set to 'objectClass=*', it
is possible to extract information about the remote LDAP server.

Solution
n/a

Risk Factor
None

Plugin ID: 24786

Nessus Windows Scan Not Performed with Admin Privileges

Synopsis
The Nessus scan of this host may be incomplete due to insufficient privileges provided.

List of Hosts

192.168.1.30

Plugin Output
It was not possible to connect to \\NAS-MAIN-OFFICE\ADMIN$

Plugin Output
It was not possible to connect to \\MEDIA1\ADMIN$

Description
The Nessus scanner testing the remote host has been given SMB
credentials to log into the remote host, however these credentials
do not have administrative privileges.

Typically, when Nessus performs a patch audit, it logs into the
remote host and reads the version of the DLLs on the remote host
to determine if a given patch has been applied or not. This is
the method Microsoft recommends to determine if a patch has been
applied.

If your Nessus scanner does not have administrative privileges when
doing a scan, then Nessus has to fall back to perform a patch audit
through the registry which may lead to false positives (especially
when using third party patch auditing tools) or to false negatives
(not all patches can be detected thru the registry).

Solution
Reconfigure your scanner to use credentials with administrative
privileges.

Risk Factor
None

Plugin ID: 11002

DNS Server Detection

Synopsis
A DNS server is listening on the remote host.

List of Hosts

192.168.1.180

192.168.1.10

Description
The remote service is a Domain Name System (DNS) server, which
provides a mapping between hostnames and IP addresses.

Solution
Disable this service if it is not needed or restrict access to
internal hosts only if the service is available externally.

See also
http://en.wikipedia.org/wiki/Domain_Name_System

Risk Factor
None

Plugin ID: 10785

Microsoft Windows SMB NativeLanManager Remote System Information Disclosure

Synopsis
It is possible to obtain information about the remote operating system.

List of Hosts

192.168.1.30

Plugin Output
The remote Operating System is : Unix
The remote native lan manager is : Samba 3.0.34
The remote SMB Domain Name is : ENTERPRISE

Plugin Output
The remote Operating System is : Windows 5.1
The remote native lan manager is : Windows 2000 LAN Manager
The remote SMB Domain Name is : MEDIA1

Plugin Output
The remote Operating System is : Windows Server (R) 2008 Standard 6001 Service Pack 1
The remote native lan manager is : Windows Server (R) 2008 Standard 6.0
The remote SMB Domain Name is : TX

Plugin Output
The remote Operating System is : Windows 7 Ultimate 7600
The remote native lan manager is : Windows 7 Ultimate 6.1
The remote SMB Domain Name is : O-REN

Description
It is possible to get the remote operating system name and
version (Windows and/or Samba) by sending an authentication
request to port 139 or 445.

Solution
n/a

Risk Factor
None

Plugin ID: 10407

X Server Detection

Synopsis
An X11 server is listening on the remote host

List of Hosts

192.168.1.14

Plugin Output

X11 Version : 11.0

Description
The remote host is running an X11 server. X11 is a client-server
protocol that can be used to display graphical applications running on
a given host on a remote client.

Since the X11 traffic is not ciphered, it is possible for an attacker
to eavesdrop on the connection.

Solution
Restrict access to this port. If the X11 client/server facility is not
used, disable TCP entirely.

Risk Factor
Low/ CVSS Base Score: 2.6
(CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N)

Plugin ID: 10407

X Server Detection

Synopsis
An X11 server is listening on the remote host

List of Hosts

192.168.1.14

Plugin Output

X11 Version : 11.0

Description
The remote host is running an X11 server. X11 is a client-server
protocol that can be used to display graphical applications running on
a given host on a remote client.

Since the X11 traffic is not ciphered, it is possible for an attacker
to eavesdrop on the connection.

Solution
Restrict access to this port. If the X11 client/server facility is not
used, disable TCP entirely.

Risk Factor
Low/ CVSS Base Score: 2.6
(CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N)

Plugin ID: 17975

Service Detection (GET request)

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.237

Plugin Output
The remote service appears to be a control channel for a Roku
Streaming Player. Not only does the the banner reveal the Device ID
associated with the player as well as its Ethernet and Wifi MACs
addresses, but it's also possible to control the device by sending
commands such as 'press up' and 'press home' to this service.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 20870

LDAP Server Detection

Synopsis
There is an LDAP server active on the remote host.

List of Hosts

192.168.1.180

Description
The remote host is running a Lightweight Directory Access Protocol, or
LDAP, server. LDAP is a protocol for providing access to directory
services over TCP/IP.

Solution
n/a

See also
http://en.wikipedia.org/wiki/LDAP

Risk Factor
None

Plugin ID: 25220

TCP/IP Timestamps Supported

Synopsis
The remote service implements TCP timestamps.

List of Hosts

192.168.1.80

192.168.1.66

192.168.1.65

192.168.1.60

192.168.1.30

192.168.1.26

192.168.1.237

192.168.1.234

192.168.1.233

192.168.1.227

192.168.1.215

192.168.1.19

192.168.1.180

192.168.1.18

192.168.1.16

192.168.1.14

192.168.1.11

192.168.1.10

192.168.1.1

Description
The remote host implements TCP timestamps, as defined by RFC1323. A
side effect of this feature is that the uptime of the remote host can
sometimes be computed.

Solution
n/a

See also
http://www.ietf.org/rfc/rfc1323.txt

Risk Factor
None

Plugin ID: 12053

Host Fully Qualified Domain Name (FQDN) Resolution

Synopsis
It was possible to resolve the name of the remote host.

List of Hosts

192.168.1.80

Plugin Output

192.168.1.80 resolves as xbox-main-office.

Plugin Output

192.168.1.66 resolves as johnnymo.

Plugin Output

192.168.1.60 resolves as paimei.

Plugin Output

192.168.1.13 resolves as gogo.

Plugin Output

192.168.1.11 resolves as hanzo.

Plugin Output

192.168.1.10 resolves as madmonk.

Plugin Output

192.168.1.1 resolves as linky.

Description
Nessus was able to resolve the FQDN of the remote host.

Solution
n/a

Risk Factor
None

Plugin ID: 19506

Nessus Scan Information

Synopsis
Information about the Nessus scan.

List of Hosts

192.168.1.98

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:53
Scan duration : 284 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:53
Scan duration : 155 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:53
Scan duration : 89 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:53
Scan duration : 328 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : Detected
Scan Start Date : 2011/4/13 12:53
Scan duration : 114 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:53
Scan duration : 270 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:53
Scan duration : 101 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:53
Scan duration : 208 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : Detected
Scan Start Date : 2011/4/13 12:53
Scan duration : 155 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:57
Scan duration : 548 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13

WARNING : no port scanner was enabled during the scan. This may
lead to incomplete results

Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:56
Scan duration : 13 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:56
Scan duration : 72 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:56
Scan duration : 129 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:56
Scan duration : 141 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : Detected
Scan Start Date : 2011/4/13 12:56
Scan duration : 61 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:56
Scan duration : 142 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:55
Scan duration : 266 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:55
Scan duration : 103 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : Detected
Scan Start Date : 2011/4/13 12:53
Scan duration : 176 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:53
Scan duration : 214 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : Detected
Scan Start Date : 2011/4/13 12:53
Scan duration : 67 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : None
Scan Start Date : 2011/4/13 12:53
Scan duration : 192 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : Detected
Scan Start Date : 2011/4/13 12:53
Scan duration : 78 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : netstat
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : Detected
Scan Start Date : 2011/4/13 12:53
Scan duration : 381 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : Detected
Scan Start Date : 2011/4/13 12:53
Scan duration : 253 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : Detected
Scan Start Date : 2011/4/13 12:53
Scan duration : 74 sec

Plugin Output
Information about this scan :

Nessus version : 4.4.1
Plugin feed version : 201104120034
Type of plugin feed : ProfessionalFeed (Direct)
Scanner IP : 192.168.1.13
Port scanner(s) : nessus_syn_scanner
Port range : default
Thorough tests : no
Experimental tests : no
Paranoia level : 1
Report Verbosity : 1
Safe checks : yes
Optimize the test : yes
CGI scanning : disabled
Web application tests : disabled
Max hosts : 80
Max checks : 5
Recv timeout : 5
Backports : Detected
Scan Start Date : 2011/4/13 12:53
Scan duration : 308 sec

Description
This script displays, for each tested host, information about the scan itself:

- The version of the plugin set
- The type of plugin feed (HomeFeed or ProfessionalFeed)
- The version of the Nessus Engine
- The port scanner(s) used
- The port range scanned
- The date of the scan
- The duration of the scan
- The number of hosts scanned in parallel
- The number of checks done in parallel

Solution
n/a

Risk Factor
None

Plugin ID: 26917

Microsoft Windows SMB Registry : Nessus Cannot Access the Windows Registry

Synopsis
Nessus is not able to access the remote Windows Registry.

List of Hosts

192.168.1.180

Plugin Output
Could not connect to the registry because:
Could not connect to \winreg

Plugin Output
Could not connect to the registry because:
Could not connect to \winreg

Description
It was not possible to connect to PIPE\winreg on the remote host.

If you intend to use Nessus to perform registry-based checks, the
registry checks will not work because the 'Remote Registry Access'
service (winreg) has been disabled on the remote host or can not be
connected to with the supplied credentials.

Solution
n/a

Risk Factor
None

Plugin ID: 24260

HyperText Transfer Protocol (HTTP) Information

Synopsis
Some information about the remote HTTP configuration can be extracted.

List of Hosts

192.168.1.13

Plugin Output

Protocol version : HTTP/1.1
SSL : yes
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Date: Wed, 13 Apr 2011 16:57:08 GMT
Server: NessusWWW
Connection: close
Expires: Wed, 13 Apr 2011 16:57:08 GMT
Content-Length: 6518
Content-Type: text/html
Cache-Control:
Expires: 0
Pragma :

Description
This test gives some information about the remote HTTP protocol - the
version used, whether HTTP Keep-Alive and HTTP pipelining are enabled,
etc...

This test is informational only and does not denote any security
problem.

Solution
n/a

Risk Factor
None

Plugin ID: 24260

HyperText Transfer Protocol (HTTP) Information

Synopsis
Some information about the remote HTTP configuration can be extracted.

List of Hosts

192.168.1.237

Plugin Output

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Content-Length: 1922
Server: Roku UPnP/1.0 MiniUPnPd/1.4
Cache-Control: no-cache
Content-Type: text/xml; charset="utf-8"

Plugin Output

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Content-Length: 1922
Server: Roku UPnP/1.0 MiniUPnPd/1.4
Cache-Control: no-cache
Content-Type: text/xml; charset="utf-8"

Description
This test gives some information about the remote HTTP protocol - the
version used, whether HTTP Keep-Alive and HTTP pipelining are enabled,
etc...

This test is informational only and does not denote any security
problem.

Solution
n/a

Risk Factor
None

Plugin ID: 24260

HyperText Transfer Protocol (HTTP) Information

Synopsis
Some information about the remote HTTP configuration can be extracted.

List of Hosts

192.168.1.180

Plugin Output

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Date: Wed, 13 Apr 2011 20:01:05 GMT
Content-Length: 110
Content-Type: text/html;charset=utf-8
Location: http://192.168.1.180:8000/en-US/
Server: CherryPy/3.1.2
Set-Cookie: session_id_8000=147c66b05f8c9460e5c545b896de7a42ba8e5388; expires=Thu, 14 Apr 2011 20:01:05 GMT; Path=/

Description
This test gives some information about the remote HTTP protocol - the
version used, whether HTTP Keep-Alive and HTTP pipelining are enabled,
etc...

This test is informational only and does not denote any security
problem.

Solution
n/a

Risk Factor
None

Plugin ID: 24260

HyperText Transfer Protocol (HTTP) Information

Synopsis
Some information about the remote HTTP configuration can be extracted.

List of Hosts

192.168.1.79

Plugin Output

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

SERVER: ipOS/7.6 UPnP/1.0 ipUPnP/1.0
EXT:
Connection: close

Description
This test gives some information about the remote HTTP protocol - the
version used, whether HTTP Keep-Alive and HTTP pipelining are enabled,
etc...

This test is informational only and does not denote any security
problem.

Solution
n/a

Risk Factor
None

Plugin ID: 24260

HyperText Transfer Protocol (HTTP) Information

Synopsis
Some information about the remote HTTP configuration can be extracted.

List of Hosts

192.168.1.234

Plugin Output

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Date: Wed, 13 Apr 2011 16:54:57 GMT
RIPT-Server: iTunesLib/3.0.2 (Mac OS X)
Content-Type: application/x-dmap-tagged
Content-Length: 0

Description
This test gives some information about the remote HTTP protocol - the
version used, whether HTTP Keep-Alive and HTTP pipelining are enabled,
etc...

This test is informational only and does not denote any security
problem.

Solution
n/a

Risk Factor
None

Plugin ID: 24260

HyperText Transfer Protocol (HTTP) Information

Synopsis
Some information about the remote HTTP configuration can be extracted.

List of Hosts

192.168.1.79

Plugin Output

Protocol version : HTTP/1.1
SSL : yes
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Cache-control: no-cache
Server: Ubicom/1.1
Content-Type: text/html

Plugin Output

Protocol version : HTTP/1.1
SSL : yes
Keep-Alive : yes
Options allowed : (Not implemented)
Headers :

Date: Wed, 13 Apr 2011 16:58:44 GMT
Server: Apache/2.2.8 (Ubuntu) mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5.9 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
Location: http://192.168.1.26/
Content-Length: 369
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Plugin Output

Protocol version : HTTP/1.0
SSL : yes
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Date: Wed, 13 Apr 2011 16:32:46 GMT
Server: Apache
Location: https://hanzo:443/sc4
Content-Length: 2
Connection: close
Content-Type: text/html

Description
This test gives some information about the remote HTTP protocol - the
version used, whether HTTP Keep-Alive and HTTP pipelining are enabled,
etc...

This test is informational only and does not denote any security
problem.

Solution
n/a

Risk Factor
None

Plugin ID: 24260

HyperText Transfer Protocol (HTTP) Information

Synopsis
Some information about the remote HTTP configuration can be extracted.

List of Hosts

192.168.1.98

Plugin Output

Protocol version : HTTP/1.0
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Content-type: text/html
Date: Tue, 11 Jan 2000 13:50:06 GMT
Connection: close
Last-Modified: Wed, 23 Aug 2006 17:22:41 GMT
Content-length: 888

Plugin Output

Protocol version : HTTP/1.0
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Content-type: text/html
Date: Tue, 04 Jan 2000 22:07:58 GMT
Connection: close
Last-Modified: Wed, 23 Aug 2006 17:22:41 GMT
Content-length: 888

Plugin Output

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : (Not implemented)
Headers :

Cache-control: no-cache
Server: Ubicom/1.1
Content-Type: text/html

Plugin Output

Protocol version : HTTP/1.0
SSL : no
Keep-Alive : no
Headers :

Server: Intoto Http Server v1.0
WWW-Authenticate: Basic realm="WRT54G"
Content-type: text/html
Pragma: no-cache
Connection: Close

Plugin Output

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : yes
Options allowed : (Not implemented)
Headers :

Date: Wed, 13 Apr 2011 16:58:44 GMT
Server: Apache/2.2.8 (Ubuntu) mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5.9 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
Location: http://192.168.1.26/my_blog
Content-Length: 375
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

Plugin Output

Protocol version : HTTP/1.1
SSL : no
Keep-Alive : no
Options allowed : OPTIONS, GET, HEAD, POST
Headers :

Expires: 0
Last-Modified: Wed, 13 Apr 2011 17:01:47 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
WWW-Authenticate: Basic realm="."
Content-type: text/html
Connection: close
Transfer-Encoding: chunked
Date: Wed, 13 Apr 2011 17:01:47 GMT
Server: lighttpd/1.4.23

Description
This test gives some information about the remote HTTP protocol - the
version used, whether HTTP Keep-Alive and HTTP pipelining are enabled,
etc...

This test is informational only and does not denote any security
problem.

Solution
n/a

Risk Factor
None

Plugin ID: 47606

D-Link DCC Protocol Security Bypass

Synopsis
The remote network service is affected by a security bypass vulnerability.

List of Hosts

192.168.1.79

192.168.1.79

Plugin Output

Nessus was able to exploit the vulnerability to retrieve the remote
device's SSID :

enterprise-bridge

Description
The remote D-link Click 'n Connect Daemon does not implement any
authentication and therefore allows remote attackers to view
configuration and control server functions via the affected service.

Solution
Unknown at this time.

See also
http://www.icysilence.org/?p=413
http://www.securityfocus.com/archive/1/512053

Risk Factor
High/ CVSS Base Score: 8.3
(CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C)
CVSS Temporal Score: 7.9(CVSS2#E:F/RL:U/RC:ND)

Bugtraq ID
41187

Plugin ID: 20217

iTunes Music Sharing Enabled

Synopsis
The remote host contains an application that may not match your corporate security policy.

List of Hosts

192.168.1.60

Description
The version of iTunes on the remote host is configured to stream music
between hosts.

Such song sharing may not be in accordance with your security policy.

Solution
Disable song sharing if desired or limit access to this port.

Risk Factor
None

Plugin ID: 51891

SSL Session Resume Supported

Synopsis
The remote host allows resuming SSL sessions.

List of Hosts

192.168.1.180

Plugin Output

This port supports resuming SSLv3/TLSv1 sessions.

Description
This script detects whether a host allows resuming SSL sessions by
performing a full SSL handshake to receive a session ID, and then
reconnecting with the previously used session ID. If the server
accepts the session ID in the second connection, the server maintains
a cache of sessions that can be resumed.

Solution
n/a

Risk Factor
None

Plugin ID: 51891

SSL Session Resume Supported

Synopsis
The remote host allows resuming SSL sessions.

List of Hosts

192.168.1.26

Plugin Output

This port supports resuming SSLv3/TLSv1 sessions.

Description
This script detects whether a host allows resuming SSL sessions by
performing a full SSL handshake to receive a session ID, and then
reconnecting with the previously used session ID. If the server
accepts the session ID in the second connection, the server maintains
a cache of sessions that can be resumed.

Solution
n/a

Risk Factor
None

Plugin ID: 51891

SSL Session Resume Supported

Synopsis
The remote host allows resuming SSL sessions.

List of Hosts

192.168.1.26

Plugin Output

This port supports resuming SSLv3/TLSv1 sessions.

Plugin Output

This port supports resuming SSLv3/TLSv1 sessions.

Description
This script detects whether a host allows resuming SSL sessions by
performing a full SSL handshake to receive a session ID, and then
reconnecting with the previously used session ID. If the server
accepts the session ID in the second connection, the server maintains
a cache of sessions that can be resumed.

Solution
n/a

Risk Factor
None

Plugin ID: 10114

ICMP Timestamp Request Remote Date Disclosure

Synopsis
It is possible to determine the exact time set on the remote host.

List of Hosts

192.168.1.98

Plugin Output
The difference between the local and remote clocks is 11222 seconds.

Plugin Output
The difference between the local and remote clocks is -18784 seconds.

Plugin Output
The difference between the local and remote clocks is 46944 seconds.

Plugin Output
The difference between the local and remote clocks is -291 seconds.

Plugin Output
The difference between the local and remote clocks is -201 seconds.

Plugin Output
The difference between the local and remote clocks is -285 seconds.

Plugin Output
The difference between the local and remote clocks is -292 seconds.

Plugin Output
The difference between the local and remote clocks is -301 seconds.

Plugin Output
This host returns non-standard timestamps (high bit is set)

Plugin Output
The difference between the local and remote clocks is 17937 seconds.

Plugin Output
The ICMP timestamps seem to be in little endian format (not in network format)
The difference between the local and remote clocks is -11242 seconds.

Plugin Output
The difference between the local and remote clocks is 17939 seconds.

Plugin Output
The ICMP timestamps seem to be in little endian format (not in network format)
The difference between the local and remote clocks is -824 seconds.

Plugin Output
The difference between the local and remote clocks is -62 seconds.

Plugin Output
The difference between the local and remote clocks is 1452 seconds.

Plugin Output
The difference between the local and remote clocks is 4715 seconds.

Plugin Output
The difference between the local and remote clocks is -291 seconds.

Description
The remote host answers to an ICMP timestamp request. This allows an
attacker to know the date which is set on your machine.

This may help him to defeat all your time based authentication
protocols.

Solution
Filter out the ICMP timestamp requests (13), and the outgoing ICMP
timestamp replies (14).

Risk Factor
None

CVE
CVE-1999-0524

Other references
OSVDB:94
CWE:200

Plugin ID: 45433

Memory Information (via DMI)

Synopsis
Information about the remote system's memory devices can be read.

List of Hosts

192.168.1.13

Plugin Output

Total memory : 2048 MB

Description
Using the SMBIOS (aka DMI) interface, it was possible to retrieve
information about the remote system's memory devices, such as the
total amount of installed memory.

Solution
n/a

Risk Factor
None

Plugin ID: 10107

HTTP Server Type and Version

Synopsis
A web server is running on the remote host.

List of Hosts

192.168.1.13

Plugin Output
The remote web server type is :

NessusWWW

Description
This plugin attempts to determine the type and the version of the
remote web server.

Solution
n/a

Risk Factor
None

Plugin ID: 10107

HTTP Server Type and Version

Synopsis
A web server is running on the remote host.

List of Hosts

192.168.1.237

Plugin Output
The remote web server type is :

Roku UPnP/1.0 MiniUPnPd/1.4

Plugin Output
The remote web server type is :

Roku UPnP/1.0 MiniUPnPd/1.4

Description
This plugin attempts to determine the type and the version of the
remote web server.

Solution
n/a

Risk Factor
None

Plugin ID: 10107

HTTP Server Type and Version

Synopsis
A web server is running on the remote host.

List of Hosts

192.168.1.180

Plugin Output
The remote web server type is :

CherryPy/3.1.2

Description
This plugin attempts to determine the type and the version of the
remote web server.

Solution
n/a

Risk Factor
None

Plugin ID: 10107

HTTP Server Type and Version

Synopsis
A web server is running on the remote host.

List of Hosts

192.168.1.66

Plugin Output
The remote web server type is :

RealVNC-VNCApplication/E4.5.4 (r41964)

Description
This plugin attempts to determine the type and the version of the
remote web server.

Solution
n/a

Risk Factor
None

Plugin ID: 10107

HTTP Server Type and Version

Synopsis
A web server is running on the remote host.

List of Hosts

192.168.1.79

Plugin Output
The remote web server type is :

ipOS/7.6 UPnP/1.0 ipUPnP/1.0

Description
This plugin attempts to determine the type and the version of the
remote web server.

Solution
n/a

Risk Factor
None

Plugin ID: 10107

HTTP Server Type and Version

Synopsis
A web server is running on the remote host.

List of Hosts

192.168.1.60

Plugin Output
The remote web server type is :

iTunes/8.2.1 (Mac OS X)

Description
This plugin attempts to determine the type and the version of the
remote web server.

Solution
n/a

Risk Factor
None

Plugin ID: 10107

HTTP Server Type and Version

Synopsis
A web server is running on the remote host.

List of Hosts

192.168.1.30

Plugin Output
The remote web server type is :

CUPS/1.1

Description
This plugin attempts to determine the type and the version of the
remote web server.

Solution
n/a

Risk Factor
None

Plugin ID: 10107

HTTP Server Type and Version

Synopsis
A web server is running on the remote host.

List of Hosts

192.168.1.79

Plugin Output
The remote web server type is :

Ubicom/1.1

Plugin Output
The remote web server type is :

Apache/2.2.8 (Ubuntu) mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5.9 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g

You can set the directive 'ServerTokens Prod' to limit the information
emanating from the server in its response headers.

Plugin Output
The remote web server type is :

Apache
and the 'ServerTokens' directive is ProductOnly
Apache does not offer a way to hide the server type.

Description
This plugin attempts to determine the type and the version of the
remote web server.

Solution
n/a

Risk Factor
None

Plugin ID: 10107

HTTP Server Type and Version

Synopsis
A web server is running on the remote host.

List of Hosts

192.168.1.80

Plugin Output
The remote web server type is :

GoAhead-Webs

Plugin Output
The remote web server type is :

Ubicom/1.1

Plugin Output
The remote web server type is :

Intoto Http Server v1.0

Plugin Output
The remote web server type is :

Apache/2.2.8 (Ubuntu) mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5.9 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g

You can set the directive 'ServerTokens Prod' to limit the information
emanating from the server in its response headers.

Plugin Output
The remote web server type is :

lighttpd/1.4.23

Description
This plugin attempts to determine the type and the version of the
remote web server.

Solution
n/a

Risk Factor
None

Plugin ID: 53360

PolarSSL Diffie-Hellman Key Exchange Security Bypass Vulnerability

Synopsis
The remote SSL/TLS server accepts a weak Diffie-Hellman public value.

List of Hosts

192.168.1.11

Description
This script detects whether a SSL/TLS server accepts a weak
Diffie-Hellman (DH) public value by setting the DH value to 1 in the
Client Key Exchange handshake message.

Servers accepting this value allow an attacker to force the
calculation of a fully predictable Diffie-Hellman secret, which serves
as the pre master secret in SSL/TLS key computation. Successfully
exploiting this issue may allow attackers to perform man-in-the-middle
attacks or impersonate trusted servers, which will aid in further
attacks.

Note that only the following cipher suites are affected :

- SSL_EDH_RSA_DES_168_SHA
- SSL_EDH_RSA_AES_128_SHA
- SSL_EDH_RSA_AES_256_SHA
- SSL_EDH_RSA_CAMELLIA_128_SHA
- SSL_EDH_RSA_CAMELLIA_256_SHA

Solution
If using PolarSSL, upgrade to version 0.99-pre3 / 0.14.2 or
higher.

See also
http://polarssl.org/trac/wiki/SecurityAdvisory201101

Risk Factor
Medium/ CVSS Base Score: 5.8
(CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N)

Bugtraq ID
46670

Other references
OSVDB:70945

Plugin ID: 42411

Microsoft Windows SMB Shares Unprivileged Access

Synopsis
It is possible to access a network share.

List of Hosts

192.168.1.30

Plugin Output

The following shares can be accessed as dtwzdicm :

- backup - (readable,writable)
+ Content of this share :
..
Dictionaries.zip
VMWareImages
Videos
RainbowTables

- media - (readable,writable)
+ Content of this share :
..
Videos
Music
Pictures

Plugin Output

The following shares can be accessed as unwnbojz :

- share - (readable)
+ Content of this share :
..
Backup-VM-09302006.zip

- iTunesMusic - (readable)
+ Content of this share :
..
Beastie Boys
Ben Harper
Biggie Smalls

Description
The remote has one or more Windows shares that can be accessed through
the network with the given credentials.

Depending on the share rights, it may allow an attacker to read/write
confidential data.

Solution
To restrict access under Windows, open Explorer, do a right click on
each share, go to the 'sharing' tab, and click on 'permissions'.

Risk Factor
High/ CVSS Base Score: 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)
CVSS Temporal Score: 7.5(CVSS2#E:H/RL:U/RC:ND)

CVE
CVE-1999-0519
CVE-1999-0520

Bugtraq ID
8026

Other references
OSVDB:299

Plugin ID: 13855

Microsoft Windows Installed Hotfixes

Synopsis
It is possible to enumerate installed hotfixes on the remote Windows host.

List of Hosts

192.168.1.215

Plugin Output

The SMB account used for this test does not have sufficient privileges to get
the list of the hotfixes installed on the remote host. As a result, Nessus was
not able to determine the missing hotfixes on the remote host and most SMB checks
have been disabled.

Solution : Configure the account you are using to get the ability to connect to ADMIN$

Description
Using the supplied credentials, Nessus was able to log into the the
remote Windows host, enumerate installed hotfixes, and store them in
its knowledge base for other plugins to use.

Solution
n/a

Risk Factor
None

Plugin ID: 50686

IP Forwarding Enabled

Synopsis
The remote has IP forwarding enabled.

List of Hosts

192.168.1.98

192.168.1.95

192.168.1.79

192.168.1.203

Description
The remote host has IP forwarding enabled. An attacker may use this
flaw to use the to route packets through this host and potentially
bypass some firewalls / routers / NAC filtering.

Unless the remote host is a router, it is recommended that you disable IP
forwarding.

Solution
On Linux, you can disable IP forwarding by doing :

echo 0 > /proc/sys/net/ipv4/ip_forward

On Windows, set the key 'IPEnableRouter' to 0 under

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameter

On Mac OS X, you can disable IP forwarding by executing the command :

sysctl -w net.inet.ip.forwarding=0

For other systems, check with your vendor.

Risk Factor
Low/ CVSS Base Score: 3.2
(CVSS2#AV:A/AC:H/Au:N/C:P/I:P/A:N)

CVE
CVE-1999-0511

Plugin ID: 15588

Web Server SSL Port HTTP Traffic Detection

Synopsis
An SSL detection issue might impede the Nessus Scan.

List of Hosts

192.168.1.13

Description
Nessus has discovered that it is talking in plain HTTP on a SSL port.

Nessus has corrected this issue by enabling HTTPS for this port only.
However if other SSL ports are used on the remote host, they might be
skipped.

Solution
Enable SSL tests in the 'Services' preference setting, or increase the
timeouts if this option is already set and the plugin missed this
port.

Risk Factor
None

Plugin ID: 15588

Web Server SSL Port HTTP Traffic Detection

Synopsis
An SSL detection issue might impede the Nessus Scan.

List of Hosts

192.168.1.26

Description
Nessus has discovered that it is talking in plain HTTP on a SSL port.

Nessus has corrected this issue by enabling HTTPS for this port only.
However if other SSL ports are used on the remote host, they might be
skipped.

Solution
Enable SSL tests in the 'Services' preference setting, or increase the
timeouts if this option is already set and the plugin missed this
port.

Risk Factor
None

Plugin ID: 22869

Software Enumeration (SSH)

Synopsis
It is possible to enumerate installed software on the remote host, via SSH.

List of Hosts

192.168.1.13

Plugin Output

Here is the list of packages installed on the remote CentOS Linux system :

GConf2-2.14.0-9.el5|(none)
MAKEDEV-3.23-1.2|(none)
Nessus-4.4.1-es5|(none)
NetworkManager-0.7.0-10.el5_5.2|1
NetworkManager-glib-0.7.0-10.el5_5.2|1
ORBit2-2.14.3-5.el5|(none)
SysVinit-2.86-15.el5|(none)
acl-2.2.39-6.el5|(none)
acpid-1.0.4-9.el5_4.2|(none)
afpfs-ng-0.8.1-2.el5.1|(none)
afpfs-ng-devel-0.8.1-2.el5.1|(none)
alsa-lib-1.0.17-1.el5|(none)
amtu-1.0.6-1.el5|(none)
anacron-2.3-45.el5.centos|(none)
apmd-3.2.2-5|1
apr-1.2.7-11.el5_5.3|(none)
apr-devel-1.2.7-11.el5_5.3|(none)
apr-util-1.2.7-11.el5_5.2|(none)
apr-util-devel-1.2.7-11.el5_5.2|(none)
aspell-0.60.3-7.1|12
aspell-en-6.0-2.1|50
at-3.1.8-84.el5|(none)
at-spi-1.7.11-3.el5|(none)
atk-1.12.2-1.fc6|(none)
attr-2.4.32-1.1|(none)
audiofile-0.2.6-5|1
audit-1.7.17-3.el5|(none)
audit-libs-1.7.17-3.el5|(none)
audit-libs-python-1.7.17-3.el5|(none)
authconfig-5.3.21-6.el5|(none)
autoconf-2.59-12|(none)
autofs-5.0.1-0.rc2.143.el5_5.6|1
automake-1.9.6-2.3.el5|(none)
automake14-1.4p6-13.el5.1|(none)
automake15-1.5-16.el5.2|(none)
automake16-1.6.3-8.el5.1|(none)
automake17-1.7.9-7.el5.2|(none)
avahi-0.6.16-9.el5_5|(none)
avahi-compat-libdns_sd-0.6.16-9.el5_5|(none)
avahi-glib-0.6.16-9.el5_5|(none)
basesystem-8.0-5.1.1.el5.centos|(none)
bash-3.2-24.el5|(none)
bc-1.06-21|(none)
bind-libs-9.3.6-4.P1.el5_5.3|30
bind-utils-9.3.6-4.P1.el5_5.3|30
binutils-2.17.50.0.6-14.el5|(none)
bison-2.3-2.1|(none)
bitstream-vera-fonts-1.10-7|(none)
bluez-gnome-0.5-5.fc6|(none)
bluez-libs-3.7-1.1|(none)
bluez-utils-3.7-2.2.el5.centos|(none)
byacc-1.9-29.2.2|(none)
bzip2-1.0.3-6.el5_5|(none)
bzip2-libs-1.0.3-6.el5_5|(none)
cairo-1.2.4-5.el5|(none)
ccid-1.3.8-1.el5|(none)
centos-release-5-5.el5.centos|10
centos-release-notes-5.5-0|(none)
checkpolicy-1.33.1-6.el5|(none)
chkconfig-1.3.30.2-2.el5|(none)
chkfontpath-1.10.1-1.1|(none)
conman-0.1.9.2-8.el5|(none)
coolkey-1.1.0-14.el5|(none)
coreutils-5.97-23.el5_4.2|(none)
cpio-2.6-23.el5_4.1|(none)
cpp-4.1.2-48.el5|(none)
cpuspeed-1.2.1-9.el5|1
cracklib-2.8.9-3.3|(none)
cracklib-dicts-2.8.9-3.3|(none)
crash-4.1.2-4.el5.centos.1|(none)
crontabs-1.10-8|(none)
cryptsetup-luks-1.0.3-5.el5|(none)
cscope-15.5-15.1.el5_3.1|(none)
ctags-5.6-1.1|(none)
cups-1.3.7-18.el5_5.8|1
cups-libs-1.3.7-18.el5_5.8|1
curl-7.15.5-9.el5|(none)
cvs-1.11.22-7.el5|(none)
cyrus-sasl-2.1.22-5.el5_4.3|(none)
cyrus-sasl-devel-2.1.22-5.el5_4.3|(none)
cyrus-sasl-lib-2.1.22-5.el5_4.3|(none)
cyrus-sasl-plain-2.1.22-5.el5_4.3|(none)
db4-4.3.29-10.el5_5.2|(none)
db4-devel-4.3.29-10.el5_5.2|(none)
dbus-1.1.2-14.el5|(none)
dbus-glib-0.73-10.el5_5|(none)
dbus-libs-1.1.2-14.el5|(none)
dbus-python-0.70-9.el5_4|(none)
desktop-file-utils-0.10-7|(none)
dev86-0.16.17-2.2|(none)
device-mapper-1.02.39-1.el5_5.2|(none)
device-mapper-event-1.02.39-1.el5_5.2|(none)
device-mapper-multipath-0.4.7-34.el5_5.6|(none)
dhclient-3.0.5-23.el5_5.2|12
dhcpv6-client-1.0.10-18.el5|(none)
diffstat-1.41-1.2.3.el5|(none)
diffutils-2.8.1-15.2.3.el5|(none)
dmidecode-2.10-3.el5|1
dmraid-1.0.0.rc13-63.el5|(none)
dmraid-events-1.0.0.rc13-63.el5|(none)
dnsmasq-2.45-1.1.el5_3|(none)
dogtail-0.6.1-3.el5|(none)
dos2unix-3.1-27.2.el5|(none)
dosfstools-2.11-9.el5|(none)
doxygen-1.4.7-1.1|1
dump-0.4b41-4.el5|(none)
e2fsprogs-1.39-23.el5_5.1|(none)
e2fsprogs-devel-1.39-23.el5_5.1|(none)
e2fsprogs-libs-1.39-23.el5_5.1|(none)
ecryptfs-utils-75-5.el5|(none)
ed-0.2-39.el5_2|(none)
eject-2.1.5-4.2.el5|(none)
elfutils-0.137-3.el5|(none)
elfutils-libelf-0.137-3.el5|(none)
elfutils-libs-0.137-3.el5|(none)
esound-0.2.36-3|1
ethtool-6-4.el5|(none)
expat-1.95.8-8.3.el5_5.3|(none)
expat-devel-1.95.8-8.3.el5_5.3|(none)
fbset-2.1-22|(none)
file-4.17-15.el5_3.1|(none)
filesystem-2.4.0-3.el5|(none)
findutils-4.2.27-6.el5|1
finger-0.17-32.2.1.1|(none)
fipscheck-1.2.0-1.el5|(none)
fipscheck-lib-1.2.0-1.el5|(none)
firebird-devel-2.1.3.18185.0-2.el5|(none)
firebird-filesystem-2.1.3.18185.0-2.el5|(none)
firebird-libfbclient-2.1.3.18185.0-2.el5|(none)
firebird-libfbembed-2.1.3.18185.0-2.el5|(none)
firstboot-tui-1.4.27.8-1.el5.centos|(none)
flex-2.5.4a-41.fc6|(none)
fontconfig-2.4.1-7.el5|(none)
freetype-2.2.1-28.el5_5.1|(none)
ftp-0.17-35.el5|(none)
gail-1.9.2-3.el5_4|(none)
gamin-0.1.7-8.el5|(none)
gamin-python-0.1.7-8.el5|(none)
gawk-3.1.5-14.el5|(none)
gcc-4.1.2-48.el5|(none)
gcc-c++-4.1.2-48.el5|(none)
gcc-gfortran-4.1.2-48.el5|(none)
gdb-7.0.1-23.el5_5.2|(none)
gdbm-1.8.0-26.2.1|(none)
gettext-0.14.6-4.el5|(none)
glib2-2.12.3-4.el5_3.1|(none)
glibc-2.5-49.el5_5.7|(none)
glibc-common-2.5-49.el5_5.7|(none)
glibc-devel-2.5-49.el5_5.7|(none)
glibc-headers-2.5-49.el5_5.7|(none)
gmp-4.1.4-10.el5|(none)
gnome-keyring-0.6.0-1.fc6|(none)
gnome-mime-data-2.4.2-3.1|(none)
gnome-mount-0.5-3.el5|(none)
gnome-python2-2.16.0-1.fc6|(none)
gnome-python2-bonobo-2.16.0-1.fc6|(none)
gnome-python2-gconf-2.16.0-1.fc6|(none)
gnome-python2-gnomevfs-2.16.0-1.fc6|(none)
gnome-vfs2-2.16.2-6.el5_5.1|(none)
gnu-efi-3.0c-1.1|(none)
gnupg-1.4.5-14.el5_5.1|(none)
gnutls-1.4.1-3.el5_4.8|(none)
gpg-pubkey-e8562897-459f07a4|(none)
gpm-1.20.1-74.1|(none)
grep-2.5.1-55.el5|(none)
groff-1.18.1.1-11.1|(none)
grub-0.97-13.5|(none)
gtk2-2.10.4-21.el5_5.6|(none)
gzip-1.3.5-11.el5.centos.1|(none)
hal-0.5.8.1-59.el5|(none)
hdparm-6.6-2|(none)
hesiod-3.1.0-8|(none)
hicolor-icon-theme-0.9-2.1|(none)
hmaccalc-0.9.6-3.el5|(none)
htmlview-4.0.0-2.el5|(none)
hwdata-0.213.18-1.el5.1|(none)
ibmasm-3.0-9|(none)
ifd-egate-0.05-15|(none)
imake-1.0.2-3|(none)
indent-2.2.9-14.fc6|(none)
info-4.8-14.el5|(none)
initscripts-8.45.30-3.el5.centos|(none)
iproute-2.6.18-11.el5|(none)
ipsec-tools-0.6.5-14.el5_5.5|(none)
iptables-1.3.5-5.3.el5_4.1|(none)
iptables-ipv6-1.3.5-5.3.el5_4.1|(none)
iptstate-1.4-2.el5|(none)
iputils-20020927-46.el5|(none)
irda-utils-0.9.17-2.fc6|(none)
irqbalance-0.55-15.el5|2
jwhois-3.2.3-8.el5|(none)
kbd-1.12-21.el5|(none)
kernel-2.6.18-194.32.1.el5|(none)
kernel-2.6.18-194.el5|(none)
kernel-devel-2.6.18-194.32.1.el5|(none)
kernel-headers-2.6.18-194.32.1.el5|(none)
keyutils-1.2-1.el5|(none)
keyutils-libs-1.2-1.el5|(none)
keyutils-libs-devel-1.2-1.el5|(none)
kpartx-0.4.7-34.el5_5.6|(none)
krb5-devel-1.6.1-36.el5_5.6|(none)
krb5-libs-1.6.1-36.el5_5.6|(none)
krb5-workstation-1.6.1-36.el5_5.6|(none)
ksh-20100202-1.el5_5.1|(none)
kudzu-1.2.57.1.24-1.el5.centos|(none)
less-436-2.el5|(none)
lftp-3.7.11-4.el5_5.3|(none)
libFS-1.0.0-3.1|(none)
libICE-1.0.1-2.1|(none)
libIDL-0.8.7-1.fc6|(none)
libSM-1.0.1-3.1|(none)
libX11-1.0.3-11.el5|(none)
libXTrap-1.0.0-3.1|(none)
libXau-1.0.1-3.1|(none)
libXaw-1.0.2-8.1|(none)
libXcursor-1.1.7-1.1|(none)
libXdmcp-1.0.1-2.1|(none)
libXevie-1.0.1-3.1|(none)
libXext-1.0.1-2.1|(none)
libXfixes-4.0.1-2.1|(none)
libXfont-1.2.2-1.0.3.el5_1|(none)
libXfontcache-1.0.2-3.1|(none)
libXft-2.1.10-1.1|(none)
libXi-1.0.1-4.el5_4|(none)
libXinerama-1.0.1-2.1|(none)
libXmu-1.0.2-5|(none)
libXpm-3.5.5-3|(none)
libXrandr-1.1.1-3.3|(none)
libXrender-0.9.1-3.1|(none)
libXres-1.0.1-3.1|(none)
libXt-1.0.2-3.2.el5|(none)
libXtst-1.0.1-3.1|(none)
libXxf86misc-1.0.1-3.1|(none)
libXxf86vm-1.0.1-3.1|(none)
libacl-2.2.39-6.el5|(none)
libaio-0.3.106-5|(none)
libart_lgpl-2.3.17-4|(none)
libattr-2.4.32-1.1|(none)
libbonobo-2.16.0-1.1.el5_5.1|(none)
libbonoboui-2.16.0-1.fc6|(none)
libcap-1.10-26|(none)
libdaemon-0.10-5.el5|(none)
libdrm-2.0.2-1.1|(none)
libevent-1.4.13-1|(none)
libfontenc-1.0.2-2.2.el5|(none)
libgcc-4.1.2-48.el5|(none)
libgcrypt-1.4.4-5.el5|(none)
libgfortran-4.1.2-48.el5|(none)
libglade2-2.6.0-2|(none)
libgnome-2.16.0-6.el5|(none)
libgnomecanvas-2.14.0-4.1|(none)
libgnomeui-2.16.0-5.el5|(none)
libgomp-4.4.0-6.el5|(none)
libgpg-error-1.4-2|(none)
libgssapi-0.10-2|(none)
libhugetlbfs-1.3-7.el5|(none)
libicu-3.6-5.11.4|(none)
libidn-0.6.5-1.1|(none)
libjpeg-6b-37|(none)
libnotify-0.4.2-6.el5|(none)
libpcap-0.9.4-15.el5|14
libpcap-devel-0.9.4-15.el5|14
libpng-1.2.10-7.1.el5_5.3|2
libselinux-1.33.4-5.5.el5|(none)
libselinux-devel-1.33.4-5.5.el5|(none)
libselinux-python-1.33.4-5.5.el5|(none)
libselinux-utils-1.33.4-5.5.el5|(none)
libsemanage-1.9.1-4.4.el5|(none)
libsepol-1.15.2-3.el5|(none)
libsepol-devel-1.15.2-3.el5|(none)
libssh-0.4.6-1.el5.rf|(none)
libssh-devel-0.4.6-1.el5.rf|(none)
libssh2-1.2.7-1.el5.rf|(none)
libssh2-devel-1.2.7-1.el5.rf|(none)
libstdc++-4.1.2-48.el5|(none)
libstdc++-devel-4.1.2-48.el5|(none)
libsysfs-2.0.0-6|(none)
libtermcap-2.0.8-46.1|(none)
libtiff-3.8.2-7.el5_5.5|(none)
libtool-1.5.22-7.el5_4|(none)
libusb-0.1.12-5.1|(none)
libuser-0.54.7-2.1.el5_4.1|(none)
libutempter-1.1.4-4.el5|(none)
libvolume_id-095-14.21.el5_5.1|(none)
libwnck-2.16.0-4.fc6|(none)
libxml2-2.6.26-2.1.2.8.el5_5.1|(none)
libxml2-python-2.6.26-2.1.2.8.el5_5.1|(none)
libxslt-1.1.17-2.el5_2.2|(none)
logrotate-3.7.4-9.el5_5.2|(none)
logwatch-7.3-8.el5|(none)
lsof-4.78-3|(none)
ltrace-0.5-13.45svn.el5|(none)
lvm2-2.02.56-8.el5_5.6|(none)
m2crypto-0.16-6.el5.6|(none)
m4-1.4.5-3.el5.1|(none)
mailcap-2.1.23-1.fc6|(none)
mailx-8.1.1-44.2.2|(none)
make-3.81-3.el5|1
man-1.6d-1.1|(none)
man-pages-2.39-15.el5_4|(none)
mcstrans-0.2.11-3.el5|(none)
mdadm-2.6.9-3.el5|(none)
mesa-libGL-6.5.1-7.8.el5|(none)
mgetty-1.1.33-9.fc6|(none)
microcode_ctl-1.17-1.50.el5|1
mingetty-1.07-5.2.2|(none)
mkbootdisk-1.5.3-2.1|(none)
mkinitrd-5.1.19.6-61.el5_5.2|(none)
mktemp-1.5-23.2.2|3
mlocate-0.15-1.el5.2|(none)
module-init-tools-3.3-0.pre3.1.60.el5_5.1|(none)
mtools-3.9.10-2.fc6|(none)
mtr-0.71-3.1|2
mysql-5.0.77-4.el5_5.4|(none)
mysql-devel-5.0.77-4.el5_5.4|(none)
nano-1.3.12-1.1|(none)
nash-5.1.19.6-61.el5_5.2|(none)
nc-1.84-10.fc6|(none)
ncurses-5.5-24.20060715|(none)
neon-0.25.5-10.el5_4.1|(none)
net-tools-1.60-81.el5|(none)
newt-0.52.2-15.el5|(none)
nfs-utils-1.0.9-47.el5_5|1
nfs-utils-lib-1.0.8-7.6.el5|(none)
notification-daemon-0.3.5-9.el5|(none)
nscd-2.5-49.el5_5.7|(none)
nspr-4.8.6-1.el5_5|(none)
nss-3.12.8-1.el5.centos|(none)
nss-tools-3.12.8-1.el5.centos|(none)
nss_db-2.2-35.4.el5_5|(none)
nss_ldap-253-25.el5|(none)
ntsysv-1.3.30.2-2.el5|(none)
numactl-0.9.8-11.el5|(none)
oddjob-0.27-9.el5|(none)
oddjob-libs-0.27-9.el5|(none)
openldap-2.3.43-12.el5_5.3|(none)
openldap-devel-2.3.43-12.el5_5.3|(none)
openssh-4.3p2-41.el5_5.1|(none)
openssh-clients-4.3p2-41.el5_5.1|(none)
openssh-server-4.3p2-41.el5_5.1|(none)
openssl-0.9.8e-12.el5_5.7|(none)
openssl-devel-0.9.8e-12.el5_5.7|(none)
oprofile-0.9.4-15.el5|(none)
pam-0.99.6.2-6.el5_5.2|(none)
pam_ccreds-3-5|(none)
pam_krb5-2.2.14-15|(none)
pam_passwdqc-1.0.2-1.2.2|(none)
pam_pkcs11-0.5.3-23|(none)
pam_smb-1.1.7-7.2.1|(none)
pango-1.14.9-8.el5.centos|(none)
paps-0.6.6-19.el5|(none)
parted-1.8.1-27.el5|(none)
passwd-0.73-1|(none)
patch-2.5.4-29.2.3.el5|(none)
patchutils-0.2.31-2.2.2|(none)
pax-3.4-2.el5_4|(none)
pciutils-2.2.3-8.el5_4|(none)
pcmciautils-014-5|(none)
pcre-6.6-2.el5_1.7|(none)
pcre-devel-6.6-2.el5_1.7|(none)
pcsc-lite-1.4.4-4.el5_5|(none)
pcsc-lite-libs-1.4.4-4.el5_5|(none)
perl-5.8.8-32.el5_5.2|4
perl-DBI-1.52-2.el5|(none)
perl-String-CRC32-1.4-2.fc6|(none)
perl-URI-1.35-3|(none)
pinfo-0.6.9-1.fc6|(none)
pkgconfig-0.21-2.el5|1
pkinit-nss-0.7.6-1.el5|(none)
pm-utils-0.99.3-10.el5.centos|(none)
policycoreutils-1.33.12-14.8.el5|(none)
poppler-0.5.4-4.4.el5_5.14|(none)
poppler-utils-0.5.4-4.4.el5_5.14|(none)
popt-1.10.2.3-20.el5_5.1|(none)
portmap-4.0-65.2.2.1|(none)
postgresql-8.1.22-1.el5_5.1|(none)
postgresql-devel-8.1.22-1.el5_5.1|(none)
postgresql-libs-8.1.22-1.el5_5.1|(none)
ppp-2.4.4-2.el5|(none)
prelink-0.4.0-2.el5|(none)
procmail-3.22-17.1.el5.centos|(none)
procps-3.2.7-16.el5|(none)
psacct-6.3.2-44.el5|(none)
psmisc-22.2-7|(none)
pstack-1.2-7.2.2|(none)
pvs-3.2.1-1|(none)
pycairo-1.2.0-1.1|(none)
pygobject2-2.12.1-5.el5|(none)
pygtk2-2.10.1-12.el5|(none)
pyorbit-2.14.1-3.el5|(none)
pyspi-0.6.1-1.el5|(none)
python-2.4.3-27.el5_5.3|(none)
python-elementtree-1.2.6-5|(none)
python-iniparse-0.2.3-4.el5|(none)
python-ldap-2.2.0-2.1|0
python-numeric-23.7-2.2.2|(none)
python-sqlite-1.1.7-1.2.1|(none)
python-urlgrabber-3.1.0-5.el5|(none)
quota-3.13-1.2.5.el5|1
rcs-5.7-30.1|(none)
rdate-1.4-8.el5|(none)
rdist-6.1.5-44|1
readahead-1.3-8.el5|1
readline-5.1-3.el5|(none)
redhat-logos-4.9.99-11.el5.centos|(none)
redhat-lsb-3.1-12.3.EL.el5.centos|(none)
redhat-menus-6.7.8-3.el5|(none)
redhat-rpm-config-8.0.45-32.el5.centos|(none)
rhpl-0.194.1-1|(none)
rmt-0.4b41-4.el5|(none)
rng-utils-2.0-1.14.1.fc6|1
rootfiles-8.1-1.1.1|(none)
rp-pppoe-3.5-32.1|(none)
rpm-4.4.2.3-20.el5_5.1|(none)
rpm-build-4.4.2.3-20.el5_5.1|(none)
rpm-libs-4.4.2.3-20.el5_5.1|(none)
rpm-python-4.4.2.3-20.el5_5.1|(none)
rsh-0.17-40.el5|(none)
rsync-2.6.8-3.1|(none)
sed-4.1.5-5.fc6|(none)
selinux-policy-2.4.6-279.el5_5.2|(none)
selinux-policy-targeted-2.4.6-279.el5_5.2|(none)
sendmail-8.13.8-8.el5|(none)
setarch-2.0-1.1|(none)
setools-3.0-3.el5|(none)
setserial-2.17-19.2.2|(none)
setup-2.5.58-7.el5|(none)
setuptool-1.19.2-1.el5.centos|(none)
sgpio-1.2.0_10-2.el5|(none)
shadow-utils-4.0.17-15.el5|2
shared-mime-info-0.19-5.el5|(none)
slang-2.0.6-4.el5|(none)
smartmontools-5.38-2.el5|1
sos-1.7-9.49.el5|(none)
specspo-13-1.el5.centos|(none)
splint-3.1.1-16.el5|(none)
sqlite-3.3.6-5|(none)
squashfs-tools-3.0-4|(none)
startup-notification-0.8-4.1|(none)
strace-4.5.18-5.el5_5.5|(none)
stunnel-4.15-2.el5.1|(none)
subversion-1.4.2-4.el5_3.1|(none)
subversion-devel-1.4.2-4.el5_3.1|(none)
sudo-1.7.2p1-9.el5_5|(none)
swig-1.3.29-2.el5|(none)
symlinks-1.2-24.2.2|(none)
sysfsutils-2.0.0-6|(none)
sysklogd-1.4.1-46.el5|(none)
syslinux-3.11-4|(none)
system-config-network-tui-1.3.99.18-1.el5|(none)
system-config-securitylevel-tui-1.6.29.1-5.el5|(none)
systemtap-1.1-3.el5_5.3|(none)
systemtap-runtime-1.1-3.el5_5.3|(none)
talk-0.17-29.2.2|(none)
tar-1.15.1-30.el5|2
tcl-8.4.13-4.el5|(none)
tcp_wrappers-7.6-40.7.el5|(none)
tcpdump-3.9.4-15.el5|14
tcsh-6.14-17.el5_5.2|(none)
telnet-0.17-39.el5|1
termcap-5.5-1.20060701.1|1
texinfo-4.8-14.el5|(none)
time-1.7-27.2.2|(none)
tmpwatch-2.9.7-1.1.el5.2|(none)
traceroute-2.0.1-5.el5|3
tree-1.5.0-4|(none)
trousers-0.3.1-4.el5|(none)
ttmkfdir-3.0.9-23.el5|(none)
tzdata-2010l-1.el5|(none)
udev-095-14.21.el5_5.1|(none)
udftools-1.0.0b3-0.1.el5|(none)
unix2dos-2.2-26.2.3.el5|(none)
unzip-5.52-3.el5|(none)
usbutils-0.71-2.1|(none)
usermode-1.88-3.el5.2|(none)
util-linux-2.13-0.52.el5_4.1|(none)
valgrind-3.5.0-1.el5|1
vconfig-1.9-3|(none)
vim-minimal-7.0.109-6.el5|2
vixie-cron-4.1-77.el5_4.1|4
wget-1.11.4-2.el5_4.1|(none)
which-2.16-7|(none)
wireless-tools-28-2.el5|1
words-3.0-9.1|(none)
wpa_supplicant-0.5.10-9.el5|1
xorg-x11-filesystem-7.1-2.fc6|(none)
xorg-x11-font-utils-7.1-2|1
xorg-x11-fonts-base-7.1-2.1.el5|(none)
xorg-x11-server-Xvfb-1.1.1-48.76.el5_5.2|(none)
xorg-x11-server-utils-7.1-4.fc6|(none)
xorg-x11-xauth-1.0.1-2.1|1
xorg-x11-xfs-1.0.2-4|1
xorg-x11-xinit-1.0.2-15.el5|(none)
yp-tools-2.9-1.el5|(none)
ypbind-1.19-12.el5|3
yum-3.2.22-26.el5.centos|(none)
yum-fastestmirror-1.1.16-14.el5.centos.1|(none)
yum-metadata-parser-1.1.2-3.el5.centos|(none)
yum-updatesd-0.9-2.el5|1
zip-2.31-2.el5|(none)
zlib-1.2.3-3|(none)
zlib-devel-1.2.3-3|(none)

Description
This plugin lists the software installed on the remote host by calling
the appropriate command (rpm -qa on RPM-based Linux distributions,
qpkg, dpkg, etc...)

Solution
Remove any software that is not in compliance with your
organization's acceptable use and security policies.

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/usr/sbin/avahi-daemon' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/opt/nessus/sbin/nessusd' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/opt/nessus/sbin/nessusd' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/usr/sbin/avahi-daemon' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/opt/nessus/sbin/nessusd' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/usr/sbin/avahi-daemon' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/opt/pvs/bin/pvs-proxy' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/opt/nessus/sbin/nessusd' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/sbin/rpc.statd' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/sbin/rpc.statd' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/sbin/rpc.statd' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/usr/sbin/cupsd' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/sbin/portmap' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 25221

Remote listeners enumeration

Synopsis
Using netstat, it is possible to identify daemons listening on the remote port.

List of Hosts

192.168.1.13

Plugin Output
The Linux process '/usr/sbin/sshd' is listening on this port.

Description
By logging into the remote host and using the Linux-specific 'netstat
-anp' command, it was possible to obtain the name of the processe
listening on the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 10400

Microsoft Windows SMB Registry Remotely Accessible

Synopsis
Access the remote Windows Registry.

List of Hosts

192.168.1.215

Description
It was possible to access the remote Windows Registry using the login
/ password combination used for the Windows local checks (SMB tests).

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.13

Plugin Output
An HTTP proxy is running on this port.

Plugin Output
A web server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.180

Plugin Output
A web server is running on this port through SSLv2.

Plugin Output
An SSLv2 server answered on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.237

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.180

Plugin Output
A web server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.14

Plugin Output
A vnc server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.14

Plugin Output
A vnc server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.66

Plugin Output
A vnc server is running on this port.

Plugin Output
A vnc server is running on this port.

Plugin Output
A vnc server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.66

Plugin Output
A web server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.79

Plugin Output
A web server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.66

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.13

Plugin Output
A TLSv1 server answered on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.13

Plugin Output
A TLSv1 server answered on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.30

Plugin Output
A web server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.180

Plugin Output
An http-rpc-epmap is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.79

Plugin Output
A web server is running on this port through TLSv1.

Plugin Output
A TLSv1 server answered on this port.

Plugin Output
A web server is running on this port through SSLv2.

Plugin Output
An SSLv2 server answered on this port.

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port through TLSv1.

Plugin Output
A TLSv1 server answered on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.233

Plugin Output
A Kerberos ticket server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.98

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port.

Plugin Output
A web server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.98

Plugin Output
A telnet server is running on this port.

Plugin Output
A telnet server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 22964

Service Detection

Synopsis
The remote service could be identified.

List of Hosts

192.168.1.98

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Plugin Output
An SSH server is running on this port.

Description
It was possible to identify the remote service by its banner or by looking
at the error message it sends when it receives an HTTP request.

Solution
n/a

Risk Factor
None

Plugin ID: 10723

LDAP Server NULL Bind Connection Information Disclosure

Synopsis
The remote LDAP server allows anonymous access.

List of Hosts

192.168.1.180

Description
The LDAP server on the remote host is currently configured such that a
user can connect to it without authentication - via a 'NULL BIND' -
and query it for information. Although the queries that are allowed
are likely to be fairly restricted, this may result in disclosure of
information that an attacker could find useful.

Note that version 3 of the LDAP protocol requires that a server allow
anonymous access -- a 'NULL BIND' -- to the root DSA-Specific Entry
(DSE) even though it may still require authentication to perform other
queries. As such, this finding may be a false-positive.

Solution
Unless the remote LDAP server supports LDAP v3, configure it to
disallow NULL BINDs.

Risk Factor
Medium/ CVSS Base Score: 5.0
(CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)

Other references
OSVDB:9723

Plugin ID: 11213

HTTP TRACE / TRACK Methods Allowed

Synopsis
Debugging functions are enabled on the remote web server.

List of Hosts

192.168.1.26

Plugin Output

To disable these methods, add the following lines for each virtual
host in your configuration file :

RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]

Alternatively, note that Apache versions 1.3.34, 2.0.55, and 2.2
support disabling the TRACE method natively via the 'TraceEnable'
directive.

Nessus sent the following TRACE request :

------------------------------ snip ------------------------------
TRACE /Nessus1771966430.html HTTP/1.1
Connection: Close
Host: 192.168.1.26
Pragma: no-cache
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Language: en
Accept-Charset: iso-8859-1,*,utf-8

------------------------------ snip ------------------------------

and received the following response from the remote server :

------------------------------ snip ------------------------------
HTTP/1.1 200 OK
Date: Wed, 13 Apr 2011 16:58:42 GMT
Server: Apache/2.2.8 (Ubuntu) mod_fastcgi/2.4.6 PHP/5.2.4-2ubuntu5.9 with Suhosin-Patch mod_ssl/2.2.8 OpenSSL/0.9.8g
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: message/http


TRACE /Nessus1771966430.html HTTP/1.1
Connection: Keep-Alive
Host: 192.168.1.26
Pragma: no-cache
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
Accept-Language: en
Accept-Charset: iso-8859-1,*,utf-8

------------------------------ snip ------------------------------

Description
The remote webserver supports the TRACE and/or TRACK methods. TRACE
and TRACK are HTTP methods that are used to debug web server
connections.

Solution
Disable these methods. Refer to the plugin output for more information.

See also
http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf
http://www.apacheweek.com/issues/03-01-24
http://www.kb.cert.org/vuls/id/288308
http://www.kb.cert.org/vuls/id/867593
http://sunsolve.sun.com/search/document.do?assetkey=1-66-200942-1

Risk Factor
Medium/ CVSS Base Score: 4.3
(CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N)
CVSS Temporal Score: 3.9(CVSS2#E:F/RL:W/RC:C)

CVE
CVE-2003-1567
CVE-2004-2320
CVE-2010-0386

Bugtraq ID
9506
9561
11604
33374
37995

Other references
OSVDB:877
OSVDB:3726
OSVDB:5648
OSVDB:50485
CWE:16

Plugin ID: 43156

NTP ntpd Mode 7 Error Response Packet Loop Remote DoS

Synopsis
The remote network time service has a denial of service vulnerability.

List of Hosts

192.168.1.234

Description
The version of ntpd running on the remote host has a denial of
service vulnerability. It responds to mode 7 error packets with its
own mode 7 error packets. A remote attacker could exploit this by
sending a mode 7 error response with a spoofed IP header, setting the
source and destination IP addresses to the IP address of the target.
This would cause ntpd to respond to itself endlessly, consuming
excessive amounts of CPU, resulting in a denial of service.

Solution
Upgrade to NTP 4.2.4p8 or later.

See also
https://support.ntp.org/bugs/show_bug.cgi?id=1331
http://www.nessus.org/u?3a07ed05

Risk Factor
Medium/ CVSS Base Score: 6.4
(CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P)
CVSS Temporal Score: 5.3(CVSS2#E:F/RL:OF/RC:C)

CVE
CVE-2009-3563

Bugtraq ID
37255

Other references
OSVDB:60847
CERT:568372
Secunia:37629

Plugin ID: 30218

Terminal Services Encryption Level is not FIPS-140 Compliant

Synopsis
The remote host is not FIPS-140 compliant.

List of Hosts

192.168.1.215

Plugin Output

The terminal services encryption level is set to :

2. Medium (Client Compatible)

Plugin Output

The terminal services encryption level is set to :

2. Medium (Client Compatible)

Description
The encryption setting used by the remote Terminal Services service
is not FIPS-140 compliant.

Solution
Change RDP encryption level to :

4. FIPS Compliant

Risk Factor
Low/ CVSS Base Score: 2.6
(CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N)

Plugin ID: 10147

Nessus Server Detection

Synopsis
A Nessus daemon is listening on the remote port.

List of Hosts

192.168.1.13

Description
A Nessus daemon is listening on the remote port. It is not
recommended to let anyone connect to this port.

Also, make sure that the remote Nessus installation has been
authorized.

Solution
Filter incoming traffic to this port.

Risk Factor
None

Plugin ID: 17651

Microsoft Windows SMB : Obtains the Password Policy

Synopsis
It is possible to retrieve the remote host's password policy using the supplied credentials.

List of Hosts

192.168.1.30

Plugin Output
The following password policy is defined on the remote host:

Minimum password len: 5
Password history len: 0
Maximum password age (d): No limit
Password must meet complexity requirements: Disabled
Minimum password age (d): 0
Forced logoff time (s): Not set
Locked account time (s): 1800
Time between failed logon (s): 1800
Number of invalid logon before locked out (s): 0

Description
Using the supplied credentials it was possible to extract the
password policy for the remote Windows host. The password policy must
conform to the Informational System Policy.

Solution
n/a

Risk Factor
None

Plugin ID: 11140

Web Server UDDI Detection

Synopsis
The remote web server operates a business-oriented web services registry.

List of Hosts

192.168.1.79

Description
The remote web server supports Universal Description, Discovery, and
Integration (UDDI) requests, which are a standard way for businesses
to publish service listings.

Solution
n/a

See also
http://en.wikipedia.org/wiki/UDDI

Risk Factor
None

Plugin ID: 46212

PVS Proxy Detection

Synopsis
A proxy service is listening on this port.

List of Hosts

192.168.1.13

Description
The remote service appears to be a Tenable Network Security proxy for
either the Passive Vulnerability Scanner (PVS) or the Security Center
3 proxy.

PVS monitors network traffic in real-time, detecting server and client
vulnerabilities, and a PVS proxy is used by Tenable's SecurityCenter 4
to transfer report data between a PVS sensor and a SecurityCenter
console.

The Security Center 3 proxy is in place for legacy communication
requirements.

Solution
Limit incoming traffic to this port if desired.

See also
http://www.nessus.org/products/pvs/

Risk Factor
None

Plugin ID: 10722

LDAP NULL BASE Search Access

Synopsis
The remote LDAP server may disclose sensitive information.

List of Hosts

192.168.1.180

Description
The remote LDAP server supports search requests with a null, or empty,
base object. This allows information to be retrieved without any
prior knowledge of the directory structure. Coupled with a NULL BIND,
an anonymous user may be able to query your LDAP server using a tool
such as 'LdapMiner'.

Note that there are valid reasons to allow queries with a null base.
For example, it is required in version 3 of the LDAP protocol to
provide access to the root DSA-Specific Entry (DSE), with information
about the supported naming context, authentication types, and the
like. It also means that legitimate users can find information in the
directory without any a priori knowledge of its structure. As such,
this finding may be a false-positive.

Solution
If the remote LDAP server supports a version of the LDAP protocol
before v3, consider whether to disable NULL BASE queries on your LDAP
server.

Risk Factor
Medium/ CVSS Base Score: 5.0
(CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)

Plugin ID: 11111

RPC Services Enumeration

Synopsis
An ONC RPC service is running on the remote host.

List of Hosts

192.168.1.18

Plugin Output

The following RPC services are available on TCP port 938 :

- program: 100024 (status), version: 1

Description
By sending a DUMP request to the portmapper, it was possible to
enumerate the ONC RPC services running on the remote port. Using this
information, it is possible to connect and bind to each service by
sending an RPC request to the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 11111

RPC Services Enumeration

Synopsis
An ONC RPC service is running on the remote host.

List of Hosts

192.168.1.18

Plugin Output

The following RPC services are available on UDP port 935 :

- program: 100024 (status), version: 1

Description
By sending a DUMP request to the portmapper, it was possible to
enumerate the ONC RPC services running on the remote port. Using this
information, it is possible to connect and bind to each service by
sending an RPC request to the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 11111

RPC Services Enumeration

Synopsis
An ONC RPC service is running on the remote host.

List of Hosts

192.168.1.13

Plugin Output

The following RPC services are available on TCP port 792 :

- program: 100024 (status), version: 1

Description
By sending a DUMP request to the portmapper, it was possible to
enumerate the ONC RPC services running on the remote port. Using this
information, it is possible to connect and bind to each service by
sending an RPC request to the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 11111

RPC Services Enumeration

Synopsis
An ONC RPC service is running on the remote host.

List of Hosts

192.168.1.13

Plugin Output

The following RPC services are available on UDP port 789 :

- program: 100024 (status), version: 1

Description
By sending a DUMP request to the portmapper, it was possible to
enumerate the ONC RPC services running on the remote port. Using this
information, it is possible to connect and bind to each service by
sending an RPC request to the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 11111

RPC Services Enumeration

Synopsis
An ONC RPC service is running on the remote host.

List of Hosts

192.168.1.30

Plugin Output

The following RPC services are available on UDP port 111 :

- program: 100000 (portmapper), version: 2

Plugin Output

The following RPC services are available on UDP port 111 :

- program: 100000 (portmapper), version: 2

Plugin Output

The following RPC services are available on UDP port 111 :

- program: 100000 (portmapper), version: 2

Description
By sending a DUMP request to the portmapper, it was possible to
enumerate the ONC RPC services running on the remote port. Using this
information, it is possible to connect and bind to each service by
sending an RPC request to the remote port.

Solution
n/a

Risk Factor
None

Plugin ID: 45432

Processor Information (via DMI)

Synopsis
Information about the remote system's processor can be read.

List of Hosts

192.168.1.13

Plugin Output

Current Speed : 2666 MHz
Version : Intel(R) Celeron(R) D CPU 2.66GHz
Manufacturer : Intel
External Clock : 133 MHz
Family : Celeron
Type : Central Processor

Description
Using the SMBIOS (aka DMI) interface, it was possible to retrieve
information about the remote system's hardware, such as its processor
type.

Solution
n/a

Risk Factor
None

Plugin ID: 46180

Additional DNS Hostnames

Synopsis
Potential virtual hosts have been detected.

List of Hosts

192.168.1.26

Plugin Output

- movabletype

Description
Hostnames different from the current hostname have been collected by
miscellaneous plugins. Different web servers may be hosted on name-
based virtual hosts.

Solution
If you want to test them, re-scan using the special vhost syntax,
such as :

www.example.com[192.0.32.10]

See also
http://en.wikipedia.org/wiki/Virtual_hosting

Risk Factor
None

Plugin ID: 46215

Inconsistent Hostname and IP Address

Synopsis
The remote host's hostname is not consistent with DNS information.

List of Hosts

192.168.1.80

Plugin Output
The host name 'xbox-main-office' does not resolve to an IP address

Description
The name of this machine either does not resolve or resolves to a
different IP address.

This may come from a badly configured reverse DNS or from a host file
in use on the Nessus scanning host.

As a result, URLs in plugin output may not be directly usable in a web
browser and some web tests may be incomplete.