Nessus Scan Report - Columbia University

Plugin output:Here is the banner from the remote Telnet server : ------------------------------ snip ------------------------------ Username: ------------------------------snip ------------------------------Plugin ID:10281Unencrypted Telnet ServerSynopsis:The remote Telnet server transmits traffic in cleartext.Description:The remote host is running a Telnet server over an unencryptedchannel. Using Telnet over an unencrypted channel is not recommendedas logins, passwords and commands are transferred in cleartext. Anattacker may eavesdrop on a Telnet session and obtain credentials orother sensitive information. Use of SSH is prefered nowadays as itprotects credentials from eavesdropping and can tunnel additional datastreams such as the X11 session.Risk factor:LowCVSS Base Score:2.6CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:NSolution:Disable this service and use SSH instead.Plugin ID:42263Service DetectionA telnet server is running on this port.Plugin ID:22964Port rpc-fmproduct (32771/tcp) [-/+]RPC Services EnumerationSynopsis:An ONC RPC service is running on the remote host.Description:By sending a DUMP request to the portmapper, it was possible toenumerate the ONC RPC services running on the remote port. Using thisinformation, it is possible to connect and bind to each service by sendingan RPC request to the remote port.