Metasploitable 2 R2 t6003q

Nessus Report
Nessus Scan Report

Tue, 22 Sep 2015 05:11:40 GMT
Table Of Contents
Hosts Summary (Executive).................................................................................................3
192.168.242.135.......................................................................................................................................................... 4
Hosts Summary (Executive)
192.168.242.135
Summary
Critical
High
Medium
Low
Info
Total
21
73
109
Details
Severity
Plugin Id
Name
Critical (10.0)
25216
Samba NDR MS-RPC Request Heap-Based Remote Buffer Overflow
Critical (10.0)
32321
Debian OpenSSH/OpenSSL Package Random Number Generator

Weakness (SSL check)
Critical (10.0)
33850
Unsupported Unix Operating System
Critical (10.0)
46882
UnrealIRCd Backdoor Detection
Critical (10.0)
51988
Rogue Shell Backdoor Detection
Critical (10.0)
61708
VNC Server 'password' Password
High (9.4)
33447
Multiple Vendor DNS Query ID Field Prediction Cache Poisoning
High (7.5)
10205
rlogin Service Detection
High (7.5)
10245
rsh Service Detection
High (7.5)
34460
Unsupported Web Server Detection
High (7.5)
42411
Microsoft Windows SMB Shares Unprivileged Access
Medium (6.4)
11356
NFS Exported Share Information Disclosure
Medium (6.4)
51192
SSL Certificate Cannot Be Trusted
Medium (6.4)
57582
SSL Self-Signed Certificate
Medium (5.8)
42263
Unencrypted Telnet Server
Medium (5.0)
10056
/doc Directory Browsable
Medium (5.0)
12217
DNS Server Cache Snooping Remote Information Disclosure
Medium (5.0)
15901
SSL Certificate Expiry
Medium (5.0)
20007
SSL Version 2 and 3 Protocol Detection
Medium (5.0)
42256
NFS Shares World Readable
Medium (5.0)
45411
SSL Certificate with Wrong Hostname
Medium (5.0)
57608
SMB Signing Required
Medium (5.0)
81606
SSL/TLS EXPORT_RSA <= 512-bit Cipher Suites Supported (FREAK)
Medium (4.3)
11213
HTTP TRACE / TRACK Methods Allowed
Medium (4.3)
26928
SSL Weak Cipher Suites Supported
Medium (4.3)
42873
SSL Medium Strength Cipher Suites Supported
Medium (4.3)
57792
Apache HTTP Server httpOnly Cookie Information Disclosure
Medium (4.3)
65821
SSL RC4 Cipher Suites Supported
Medium (4.3)
78479
SSLv3 Padding Oracle On Downgraded Legacy Encryption Vulnerability

(POODLE)
Medium (4.3)
83738
SSL/TLS EXPORT_DHE <= 512-bit Export Cipher Suites Supported

(Logjam)
Medium (4.3)
83875
SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam)
Medium (4.0)
52611
SMTP Service STARTTLS Plaintext Command Injection
Low (2.6)
10407
X Server Detection
Low (2.6)
31705
SSL Anonymous Cipher Suites Supported
Low (2.6)
70658
SSH Server CBC Mode Ciphers Enabled
Low (2.6)
71049
SSH Weak MAC Algorithms Enabled
Info
10028
DNS Server BIND version Directive Remote Version Detection
Info
10092
FTP Server Detection
Info
10107
HTTP Server Type and Version
Info
10114
ICMP Timestamp Request Remote Date Disclosure
Info
10150
Windows NetBIOS / SMB Remote Host Information Disclosure
Info
10223
RPC portmapper Service Detection
Info
10263
SMTP Server Detection
Info
10267
SSH Server Type and Version Information
Info
10281
Telnet Server Detection
Info
10287
Traceroute Information
Info
10342
VNC Software Detection
Info
10394
Microsoft Windows SMB Log In Possible
Info
10395
Microsoft Windows SMB Shares Enumeration
Info
10397
Microsoft Windows SMB LanMan Pipe Server Listing Disclosure
Info
10437
NFS Share Export List
Info
10719
MySQL Server Detection
Info
10785
Microsoft Windows SMB NativeLanManager Remote System Information

Disclosure
Info
10859
Microsoft Windows SMB LsaQueryInformationPolicy Function SID

Enumeration
Info
10860
SMB Use Host SID to Enumerate Local Users
Info
10863
SSL Certificate Information
Info
10881
SSH Protocol Versions Supported
Info
11002
DNS Server Detection
Info
11011
Microsoft Windows SMB Service Detection
Info
11111
RPC Services Enumeration
Info
11153
Service Detection (HELP Request)
Info
11154
Unknown Service Detection: Banner Retrieval
Info
11156
IRC Daemon Version Detection
Info
11219
Nessus SYN scanner
Info
11422
Web Server Unconfigured - Default Install Page Present
Info
11424
WebDAV Detection
Info
11819
TFTP Daemon Detection
Info
11936
OS Identification
Info
17651
Microsoft Windows SMB : Obtains the Password Policy
Info
17975
Service Detection (GET request)
Info
18261
Apache Banner Linux Distribution Disclosure
Info
19288
VNC Server Security Type Detection
Info
19506
Nessus Scan Information
Info
20094
VMware Virtual Machine Detection
Info
20108
Web Server / Application favicon.ico Vendor Fingerprinting
Info
21186
AJP Connector Detection
Info
21643
SSL Cipher Suites Supported
Info
22227
RMI Registry Detection
Info
22964
Service Detection
Info
24260
HyperText Transfer Protocol (HTTP) Information
Info
25220
TCP/IP Timestamps Supported
Info
25240
Samba Server Detection
Info
26024
PostgreSQL Server Detection
Info
34277
Nessus UDP Scanner
Info
35371
DNS Server hostname.bind Map Hostname Disclosure
Info
35716
Ethernet Card Manufacturer Detection
Info
39446
Apache Tomcat Default Error Page Version Detection
Info
39520
Backported Security Patch Detection (SSH)
Info
39521
Backported Security Patch Detection (WWW)
Info
40984
Browsable Web Directories
Info
42088
SMTP Service STARTTLS Command Support
Info
45410
SSL Certificate commonName Mismatch
Info
45590
Common Platform Enumeration (CPE)
Info
48243
PHP Version
Info
50845
OpenSSL Detection
Info
51891
SSL Session Resume Supported
Info
52703
vsftpd Detection
Info
53335
RPC portmapper (TCP)
Info
54615
Device Type
Info
56984
SSL / TLS Versions Supported
Info
57041
SSL Perfect Forward Secrecy Cipher Suites Supported
Info
60119
Microsoft Windows SMB Share Permissions Enumeration
Info
62563
SSL Compression Methods Supported
Info
65792
VNC Server Unencrypted Communication Detection
Info
66334
Patch Report
Info
70544
SSL Cipher Block Chaining Cipher Suites Supported
Info
70657
SSH Algorithms and Languages Supported
Info
72779
DNS Server Version Detection
Info
84574
Backported Security Patch Detection (PHP)

Metasploitable 2 R2 t6003q

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Metasploitable 2 R2 t6003q

Uploaded by

Copyright:

Available Formats

Nessus Report

Nessus Scan Report

Hosts Summary (Executive)

Samba NDR MS-RPC Request Heap-Based Remote Buffer Overflow

Debian OpenSSH/OpenSSL Package Random Number Generator

Unsupported Unix Operating System

UnrealIRCd Backdoor Detection

Rogue Shell Backdoor Detection

VNC Server 'password' Password

Multiple Vendor DNS Query ID Field Prediction Cache Poisoning

rlogin Service Detection

rsh Service Detection

Unsupported Web Server Detection

Microsoft Windows SMB Shares Unprivileged Access

NFS Exported Share Information Disclosure

SSL Certificate Cannot Be Trusted

SSL Self-Signed Certificate

Unencrypted Telnet Server

/doc Directory Browsable

DNS Server Cache Snooping Remote Information Disclosure

SSL Certificate Expiry

SSL Version 2 and 3 Protocol Detection

NFS Shares World Readable

SSL Certificate with Wrong Hostname

SMB Signing Required

SSL/TLS EXPORT_RSA <= 512-bit Cipher Suites Supported (FREAK)

HTTP TRACE / TRACK Methods Allowed

SSL Weak Cipher Suites Supported

SSL Medium Strength Cipher Suites Supported

Apache HTTP Server httpOnly Cookie Information Disclosure

SSL RC4 Cipher Suites Supported

SSLv3 Padding Oracle On Downgraded Legacy Encryption Vulnerability

SSL/TLS EXPORT_DHE <= 512-bit Export Cipher Suites Supported

SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam)

SMTP Service STARTTLS Plaintext Command Injection

SSL Anonymous Cipher Suites Supported

SSH Server CBC Mode Ciphers Enabled

SSH Weak MAC Algorithms Enabled

DNS Server BIND version Directive Remote Version Detection

FTP Server Detection

HTTP Server Type and Version

ICMP Timestamp Request Remote Date Disclosure

Windows NetBIOS / SMB Remote Host Information Disclosure

RPC portmapper Service Detection

SMTP Server Detection

SSH Server Type and Version Information

Telnet Server Detection

VNC Software Detection

Microsoft Windows SMB Log In Possible

Microsoft Windows SMB Shares Enumeration

Microsoft Windows SMB LanMan Pipe Server Listing Disclosure

NFS Share Export List

MySQL Server Detection

Microsoft Windows SMB NativeLanManager Remote System Information

Microsoft Windows SMB LsaQueryInformationPolicy Function SID

SMB Use Host SID to Enumerate Local Users

SSL Certificate Information

SSH Protocol Versions Supported

DNS Server Detection

Microsoft Windows SMB Service Detection

RPC Services Enumeration

Service Detection (HELP Request)

Unknown Service Detection: Banner Retrieval