Nessus Scan Report - Columbia University

More documents

Recommendations

Info

Other references:OSVDB:193Port shell? (514/tcp) [-/+]Port unknown (52412/udp) [-/+]Port smtp (587/tcp) [-/+]SMTP Server DetectionSynopsis:An SMTP server is listening on the remote port.Description:The remote host is running a mail (SMTP) server on this port. SinceSMTP servers are the targets of spammers, it is recommended youdisable it if you do not use it.Risk factor:NoneSolution:Disable this service if you do not use it, or filter incoming traffic to thisport.Plugin output:Remote SMTP server banner : 220 ctsa.cpmc.columbia.edu ESMTPSendmail 8.13.8+Sun/8.13.8; Wed, 6 Oct 2010 21:50:11 -0400 (EDT)500 5.5.1 Command unrecognized: "GET / HTTP/1.0" 500 5.5.1Command unrecognized: ""Plugin ID:10263Service DetectionAn SMTP server is running on this port.Plugin ID:22964Port unknown (60405/tcp) [-/+]Port xfs (7100/tcp) [-/+]X Font Service DetectionSynopsis:An X font service is listening on the remote host.Description:
The remote service is an X Window Font Service (xfs) daemon, whichserves font files to clients.Risk factor:NoneSee also:http://www.x.org/docs/FSProtocol/fsproto.pdfSee also:http://en.wikipedia.org/wiki/X_Font_ServerSolution:Limit incoming traffic to this port if desired or disable the service as theuse of server-supplied fonts is currently deprecated.Plugin output:<strong>Nessus</strong> was able to gather the following information from the remote XFont Server : - Protocol : 2.0 - Alternate servers : none - Max requestsize : 65536 bytes - Vendor release : 6000 - Vendor string : XConsortium - Available fonts (up to 15) : --courier-bold-o-normal--0-0-0-0-m-0-iso8859-1 --courier-bold-r-normal--0-0-0-0-m-0-iso8859-1 --courier-medium-o-normal--0-0-0-0-m-0-iso8859-1 --courier-medium-rnormal--0-0-0-0-m-0-iso8859-1--symbol-medium-r-normal--0-0-0-0-p-0--symbol --symbol-medium-r-normal--0-0-0-0-p-0-sun-fontspecific -itccourier-bold-o-normal--0-0-0-0-m-0-iso8859-1-itc-courier-bold-r-normal--0-0-0-0-m-0-iso8859-1 -itc-courier-medium-o-normal--0-0-0-0-m-0-iso8859-1 -itc-courier-medium-r-normal--0-0-0-0-m-0-iso8859-1 -linotype-helvetica-bold-o-normal--0-0-0-0-p-0-iso8859-1 -linotypehelvetica-bold-o-normal-sans-0-0-0-0-p-0-iso8859-1-linotype-helveticabold-r-normal--0-0-0-0-p-0-iso8859-1-linotype-helvetica-bold-r-normalsans-0-0-0-0-p-0-iso8859-1-linotype-helvetica-medium-o-normal--0-0-0-0-p-0-iso8859-1Plugin ID:26971Port finger (79/tcp) [-/+]Finger Recursive Request Arbitrary Site RedirectionSynopsis:It is possible to use the remote host to perform third-party host scans.Description:The remote finger service accepts redirect requests. That is, users canperform requests like : finger user@host@victim This allows an attackerto use this computer as a relay to gather information on a third-partynetwork. In addition, this type of syntax can be used to create a denialof service condition on the remote host.Risk factor:Medium
Page 1 and 2: List of hosts156.111.5.207156.111.5
Page 3 and 4: Synopsis:An ONC RPC service is runn
Page 5 and 6: Address: reidar@columbia.edu Issuer
Page 7 and 8: SNMP Request Network Interfaces Enu
Page 9 and 10: SUNWvldu SUNWaclg SUNWvolr SUNWgnom
Page 11 and 12: SUNWefcu SUNWerid SUNWcpdas SUNWeuo
Page 13 and 14: devel SUNWjws2 SUNWgnome-config-dev
Page 15 and 16: SUNWkbreg SUNWsbreg SUNWcupdatemgru
Page 17 and 18: Plugin output:Nessus has negotiated
Page 19 and 20: Synopsis:An ONC RPC service is runn
Page 21 and 22: server to ensure sensitive content
Page 23 and 24: Synopsis:A Telnet server is listeni
Page 25 and 26: Plugin output:Here is the banner fr
Page 27 and 28: Risk factor:NoneSolution:n/aPlugin
Page 29 and 30: NoneSolution:n/aPlugin output:The f
Page 31 and 32: NoneSolution:n/aPlugin output:The f
Page 33: Synopsis:An SMB server is running o
Page 37 and 38: Service DetectionA finger daemon is
Page 39: it is set up with stunnel to encryp

Nessus Scan Report - Columbia University

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?