Executive Summary: >PRINT TOP 10 HOSTS with ISSUES PLUGIN IDS ISSUES 22964 22 10736 14 24260 12 10107 10 20108 6 10662 6 51192 6 33817 6 43111 6 10863 5 11032 4 53491 4 47830 4 SYNOPSIS 11954 4 SSL Certificate signed with an unknown Certificate Authority The SSL certificate for this service is signed by an unknown certificate authority. SGDynamo sgdynamo.exe HTNAME Parameter Path Disclosure The remote host has an application that is affected by an information disclosure vulnerability. Service Detection The remote service could be identified. DCE Services Enumeration A DCE/RPC service is running on the remote host. HyperText Transfer Protocol (HTTP) Information Some information about the remote HTTP configuration can be extracted. HTTP Server Type and Version A web server is running on the remote host. Web Server / Application favicon.ico Vendor Fingerprinting The remote web server contains a graphic image that is prone to information disclosure. Web mirroring Nessus crawled the remote web site. Web Application Tests : Load Estimation Load estimation for web application tests. HTTP Methods Allowed (per directory) This plugin determines which HTTP methods are allowed on various CGI directories. SSL Certificate Information This plugin displays the SSL certificate. Web Server Directory Enumeration It is possible to enumerate directories on the web server. SSL / TLS Renegotiation DoS The remote service allows repeated renegotiation of TLS / SSL connections. CGI Generic Injectable Parameter Some CGIs are candidate for extended injection tests. Microsoft Windows SMB Service Detection A file / print sharing service is listening on the remote host. External URLs Links to external sites were gathered. Web Server Allows Password Auto-Completion Auto-complete is not disabled on password fields. SSL Cipher Suites Supported The remote service encrypts communications using SSL. Microsoft Windows SMB NativeLanManager Remote System Information Disclosure It is possible to obtain information about the remote operating system. SMTP Authentication Methods The remote mail server supports authentication. POP Server Detection A POP server is listening on the remote port. SMTP Service Cleartext Login Permitted The remote mail server allows cleartext logins. Web Server Uses Plain Text Authentication Forms The remote web server might transmit credentials in cleartext. Microsoft Windows SMB NULL Session Authentication It is possible to log into the remote Windows host with a NULL s es s ion. Common Platform Enumeration (CPE) It is possible to enumerate CPE names that matched on the remote system. 11011 4 49704 4 42057 4 21643 3 10785 2 54580 2 10185 2 54582 2 26194 2 26920 2 45590 2 11936 2 10150 2 51891 2 10397 2 26917 2 46180 2 54615 2 12053 2 11153 2 19506 2 10386 2 11414 2 10394 2 10263 2 10147 2 Medium Severity problem(s) found 0% High Severity 5% Medium Severity 94% Low Severity PLUGIN IDS SEVERITY 51192 Medium 11954 Medium 22964 Low 10736 Low 24260 Low 10107 Low 20108 Low 10662 Low 33817 Low 43111 Low 10863 Low 11032 Low 53491 Low 47830 Low 11011 Low 49704 Low 42057 Low 21643 Low 10785 Low 54580 Low 10185 Low 54582 Low 26194 Low 26920 Low 45590 Low # OF ISSUES 6 4 22 14 12 10 6 6 6 6 5 4 4 4 4 4 4 3 2 2 2 2 2 2 2 11936 Low 2 10150 Low 2 51891 Low 2 10397 Low 2 26917 Low 2 46180 Low 2 54615 Low 2 12053 Low 2 11153 Low 2 19506 Low 2 10386 Low 2 11414 Low 2 10394 Low 2 10263 Low 2 10147 Low 2 remote system. OS Identification It is possible to guess the remote operating system Windows NetBIOS / SMB Remote Host Information Disclosure It is possible to obtain the network name of the remote host. SSL Session Resume Supported The remote host allows resuming SSL sessions. Microsoft Windows SMB LanMan Pipe Server Listing Disclosure It is possible to obtain network information. Microsoft Windows SMB Registry : Nessus Cannot Access the Windows Registry Nessus is not able to access the remote Windows Registry. Additional DNS Hostnames Potential virtual hosts have been detected. Device Type It is possible to guess the remote device type. Host Fully Qualified Domain Name (FQDN) Resolution It was possible to resolve the name of the remote host. Service Detection (HELP Request) The remote service could be identified. Nessus Scan Information Information about the Nessus scan. Web Server No 404 Error Code Check The remote web server does not return 404 error codes. IMAP Service Banner Retrieval An IMAP server is running on the remote host. Microsoft Windows SMB Log In Possible It is possible to log into the remote host. SMTP Server Detection An SMTP server is listening on the remote port. Nessus Server Detection A Nessus daemon is listening on the remote port. Scan Time Start time: Fri Sep 09 17:09:15 2011 End time: Fri Sep 09 18:04:55 2011 Number of vulnerabilities High 0 Medium 10 Low 158 Remote Host Information Operating System: Windows 7 Professional NetBIOS name: SEBASTIAN-PC IP address: 1 9 2 .1 6 8 .1 .1 5 0 MAC address: f 4 : 6 d : 0 4 : 3 9 : c1 : c6 ^BACK