Scribd Logo
Upload

Welcome to Scribd!

  • 546 views

    Metasploitable 2 R2 t6003q

    Uploaded by

    kalq
    The Nessus scan report identified 109 issues across multiple severity levels (e.g. critical, high, medium, low) on the host 192.168.242.135. There were 6 critical issues detected which pose significant risks such as remote buffer overflows. Additionally, the report provided details on the issues found including the plugin ID, name, and severity level for each issue detected on the host.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Metasploitable 2 R2 t6003q

    Uploaded by

    kalq
    546 views7 pages
    The Nessus scan report identified 109 issues across multiple severity levels (e.g. critical, high, medium, low) on the host 192.168.242.135. There were 6 critical issues detected which pose significant risks such as remote buffer overflows. Additionally, the report provided details on the issues found including the plugin ID, name, and severity level for each issue detected on the host.

    Original Description:

    Metasploit

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The Nessus scan report identified 109 issues across multiple severity levels (e.g. critical, high, medium, low) on the host 192.168.242.135. There were 6 critical issues detected which pose significant risks such as remote buffer overflows. Additionally, the report provided details on the issues found including the plugin ID, name, and severity level for each issue detected on the host.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    546 views7 pages

    Metasploitable 2 R2 t6003q

    Uploaded by

    kalq
    The Nessus scan report identified 109 issues across multiple severity levels (e.g. critical, high, medium, low) on the host 192.168.242.135. There were 6 critical issues detected which pose significant risks such as remote buffer overflows. Additionally, the report provided details on the issues found including the plugin ID, name, and severity level for each issue detected on the host.

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 7
    At a glance
    Powered by AI
    The report details the results of a vulnerability scan conducted on a host. Several critical and high risk issues were identified.

    The scan found 6 critical vulnerabilities, 5 high risk vulnerabilities, and various medium and low risk issues.

    The most severe issues reported include vulnerabilities related to Samba, OpenSSH, unsupported operating systems and backdoors.

    Nessus Report

    Nessus Scan Report


    Tue, 22 Sep 2015 05:11:40 GMT

    Table Of Contents
    Hosts Summary (Executive).................................................................................................3

    192.168.242.135.......................................................................................................................................................... 4

    Hosts Summary (Executive)

    192.168.242.135
    Summary
    Critical

    High

    Medium

    Low

    Info

    Total

    21

    73

    109

    Details
    Severity

    Plugin Id

    Name

    Critical (10.0)

    25216

    Samba NDR MS-RPC Request Heap-Based Remote Buffer Overflow

    Critical (10.0)

    32321

    Debian OpenSSH/OpenSSL Package Random Number Generator


    Weakness (SSL check)

    Critical (10.0)

    33850

    Unsupported Unix Operating System

    Critical (10.0)

    46882

    UnrealIRCd Backdoor Detection

    Critical (10.0)

    51988

    Rogue Shell Backdoor Detection

    Critical (10.0)

    61708

    VNC Server 'password' Password

    High (9.4)

    33447

    Multiple Vendor DNS Query ID Field Prediction Cache Poisoning

    High (7.5)

    10205

    rlogin Service Detection

    High (7.5)

    10245

    rsh Service Detection

    High (7.5)

    34460

    Unsupported Web Server Detection

    High (7.5)

    42411

    Microsoft Windows SMB Shares Unprivileged Access

    Medium (6.4)

    11356

    NFS Exported Share Information Disclosure

    Medium (6.4)

    51192

    SSL Certificate Cannot Be Trusted

    Medium (6.4)

    57582

    SSL Self-Signed Certificate

    Medium (5.8)

    42263

    Unencrypted Telnet Server

    Medium (5.0)

    10056

    /doc Directory Browsable

    Medium (5.0)

    12217

    DNS Server Cache Snooping Remote Information Disclosure

    Medium (5.0)

    15901

    SSL Certificate Expiry

    Medium (5.0)

    20007

    SSL Version 2 and 3 Protocol Detection

    Medium (5.0)

    42256

    NFS Shares World Readable

    Medium (5.0)

    45411

    SSL Certificate with Wrong Hostname

    Medium (5.0)

    57608

    SMB Signing Required

    Medium (5.0)

    81606

    SSL/TLS EXPORT_RSA <= 512-bit Cipher Suites Supported (FREAK)

    Medium (4.3)

    11213

    HTTP TRACE / TRACK Methods Allowed

    Medium (4.3)

    26928

    SSL Weak Cipher Suites Supported

    Medium (4.3)

    42873

    SSL Medium Strength Cipher Suites Supported

    Medium (4.3)

    57792

    Apache HTTP Server httpOnly Cookie Information Disclosure

    Medium (4.3)

    65821

    SSL RC4 Cipher Suites Supported

    Medium (4.3)

    78479

    SSLv3 Padding Oracle On Downgraded Legacy Encryption Vulnerability


    (POODLE)

    Medium (4.3)

    83738

    SSL/TLS EXPORT_DHE <= 512-bit Export Cipher Suites Supported


    (Logjam)

    Medium (4.3)

    83875

    SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam)

    Medium (4.0)

    52611

    SMTP Service STARTTLS Plaintext Command Injection

    Low (2.6)

    10407

    X Server Detection

    Low (2.6)

    31705

    SSL Anonymous Cipher Suites Supported

    Low (2.6)

    70658

    SSH Server CBC Mode Ciphers Enabled

    Low (2.6)

    71049

    SSH Weak MAC Algorithms Enabled

    Info

    10028

    DNS Server BIND version Directive Remote Version Detection

    Info

    10092

    FTP Server Detection

    Info

    10107

    HTTP Server Type and Version

    Info

    10114

    ICMP Timestamp Request Remote Date Disclosure

    Info

    10150

    Windows NetBIOS / SMB Remote Host Information Disclosure

    Info

    10223

    RPC portmapper Service Detection

    Info

    10263

    SMTP Server Detection

    Info

    10267

    SSH Server Type and Version Information

    Info

    10281

    Telnet Server Detection

    Info

    10287

    Traceroute Information

    Info

    10342

    VNC Software Detection

    Info

    10394

    Microsoft Windows SMB Log In Possible

    Info

    10395

    Microsoft Windows SMB Shares Enumeration

    Info

    10397

    Microsoft Windows SMB LanMan Pipe Server Listing Disclosure

    Info

    10437

    NFS Share Export List

    Info

    10719

    MySQL Server Detection

    Info

    10785

    Microsoft Windows SMB NativeLanManager Remote System Information


    Disclosure

    Info

    10859

    Microsoft Windows SMB LsaQueryInformationPolicy Function SID


    Enumeration

    Info

    10860

    SMB Use Host SID to Enumerate Local Users

    Info

    10863

    SSL Certificate Information

    Info

    10881

    SSH Protocol Versions Supported

    Info

    11002

    DNS Server Detection

    Info

    11011

    Microsoft Windows SMB Service Detection

    Info

    11111

    RPC Services Enumeration

    Info

    11153

    Service Detection (HELP Request)

    Info

    11154

    Unknown Service Detection: Banner Retrieval

    Info

    11156

    IRC Daemon Version Detection

    Info

    11219

    Nessus SYN scanner

    Info

    11422

    Web Server Unconfigured - Default Install Page Present

    Info

    11424

    WebDAV Detection

    Info

    11819

    TFTP Daemon Detection

    Info

    11936

    OS Identification

    Info

    17651

    Microsoft Windows SMB : Obtains the Password Policy

    Info

    17975

    Service Detection (GET request)

    Info

    18261

    Apache Banner Linux Distribution Disclosure

    Info

    19288

    VNC Server Security Type Detection

    Info

    19506

    Nessus Scan Information

    Info

    20094

    VMware Virtual Machine Detection

    Info

    20108

    Web Server / Application favicon.ico Vendor Fingerprinting

    Info

    21186

    AJP Connector Detection

    Info

    21643

    SSL Cipher Suites Supported

    Info

    22227

    RMI Registry Detection

    Info

    22964

    Service Detection

    Info

    24260

    HyperText Transfer Protocol (HTTP) Information

    Info

    25220

    TCP/IP Timestamps Supported

    Info

    25240

    Samba Server Detection

    Info

    26024

    PostgreSQL Server Detection

    Info

    34277

    Nessus UDP Scanner

    Info

    35371

    DNS Server hostname.bind Map Hostname Disclosure

    Info

    35716

    Ethernet Card Manufacturer Detection

    Info

    39446

    Apache Tomcat Default Error Page Version Detection

    Info

    39520

    Backported Security Patch Detection (SSH)

    Info

    39521

    Backported Security Patch Detection (WWW)

    Info

    40984

    Browsable Web Directories

    Info

    42088

    SMTP Service STARTTLS Command Support

    Info

    45410

    SSL Certificate commonName Mismatch

    Info

    45590

    Common Platform Enumeration (CPE)

    Info

    48243

    PHP Version

    Info

    50845

    OpenSSL Detection

    Info

    51891

    SSL Session Resume Supported

    Info

    52703

    vsftpd Detection

    Info

    53335

    RPC portmapper (TCP)

    Info

    54615

    Device Type

    Info

    56984

    SSL / TLS Versions Supported

    Info

    57041

    SSL Perfect Forward Secrecy Cipher Suites Supported

    Info

    60119

    Microsoft Windows SMB Share Permissions Enumeration

    Info

    62563

    SSL Compression Methods Supported

    Info

    65792

    VNC Server Unencrypted Communication Detection

    Info

    66334

    Patch Report

    Info

    70544

    SSL Cipher Block Chaining Cipher Suites Supported

    Info

    70657

    SSH Algorithms and Languages Supported

    Info

    72779

    DNS Server Version Detection

    Info

    84574

    Backported Security Patch Detection (PHP)

    You might also like