Nessus Report

Nessus Scan Report

Wed, 11 Oct 2017 12:08:33 PET
 Table Of Contents
Hosts Summary (Executive).................................................................................................3
10.10.10.249................................................................................................................................................................ 4
Hosts Summary (Executive)
10.10.10.249
Summary
Critical High Medium Low Info Total

6 25 59 3 24 117
Details
Severity Plugin Id Name

Critical (10.0) 17757 OpenSSL < 0.9.7l / 0.9.8d Multiple Vulnerabilities

Critical (10.0) 33850 Unix Operating System Unsupported Version Detection

Critical (10.0) 34822 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / current : libxml2
(SSA:2008-324-01)

Critical (10.0) 45004 Apache 2.2.x < 2.2.15 Multiple Vulnerabilities

Critical (10.0) 57603 Apache 2.2.x < 2.2.13 APR apr_palloc Heap Overflow

Critical (10.0) 78555 OpenSSL Unsupported

High (9.3) 17760 OpenSSL < 0.9.8f Multiple Vulnerabilities

High (9.3) 22468 Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : openssh
(SSA:2006-272-02)

High (9.3) 24915 Slackware 10.2 / 11.0 / current : libwpd (SSA:2007-085-02)

High (9.3) 36009 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / current : lcms
(SSA:2009-083-01)

High (9.3) 53362 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 9.0 /
9.1 / current : libtiff (SSA:2011-098-01)

High (9.3) 57459 OpenSSL < 0.9.8s Multiple Vulnerabilities

High (9.3) 74363 OpenSSL 0.9.8 < 0.9.8za Multiple Vulnerabilities

High (8.5) 59507 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 /
8.1 / 9.0 / 9.1 / current : bind (SSA:2012-166-01)

High (8.5) 100995 Apache 2.2.x < 2.2.33-dev / 2.4.x < 2.4.26 Multiple Vulnerabilities

High (7.8) 24667 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : bind (SSA:2007-026-01)

High (7.8) 55976 Apache HTTP Server Byte Range DoS

High (7.6) 17766 OpenSSL < 0.9.8p / 1.0.0b Buffer Overflow

High (7.5) 22098 Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : mutt
(SSA:2006-207-01)

High (7.5) 26053 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 : openssh
(SSA:2007-255-01)

High (7.5) 31802 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 / current : m4
(SSA:2008-098-01)

High (7.5) 32083 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 / current : libpng
(SSA:2008-119-01)

4
High (7.5) 38778 Slackware 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / current : cyrus-sasl
(SSA:2009-134-01)

High (7.5) 42052 Apache 2.2.x < 2.2.14 Multiple Vulnerabilities

High (7.5) 47562 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 8.1 /
9.0 / 9.1 / current : libpng (SSA:2010-180-01)

High (7.5) 58799 OpenSSL < 0.9.8w ASN.1 asn1_d2i_read_bio Memory Corruption

High (7.5) 77531 Apache 2.2.x < 2.2.28 Multiple Vulnerabilities

High (7.5) 101787 Apache 2.2.x < 2.2.34 Multiple Vulnerabilities

High (7.2) 49238 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 8.1 /
9.0 / 9.1 / current : sudo redo (SSA:2010-258-03)

High (7.1) 77086 OpenSSL 0.9.8 < 0.9.8zb Multiple Vulnerabilities

High 54871 Slackware 10.2 / 11.0 : bind 10.2/11.0 recompile (SSA:2009-015-01)

Medium (6.9) 31801 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 / current : openssh
(SSA:2008-095-01)

Medium (6.9) 45581 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 8.1 / 9.0 / 9.1 /
current : sudo (SSA:2010-110-01)

Medium (6.9) 62101 Apache 2.2.x < 2.2.23 Multiple Vulnerabilities

Medium (6.8) 25771 Slackware 10.2 / 11.0 / current : libexif (SSA:2007-164-01)

Medium (6.8) 25907 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 9.0 / 9.1 : tcpdump
(SSA:2007-230-01)

Medium (6.8) 29188 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 / current : rsync
(SSA:2007-335-01)

Medium (6.8) 35727 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 8.1 / 9.0 / 9.1 /
current : libpng (SSA:2009-051-01)

Medium (6.8) 47563 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 9.0 /
9.1 / current : libtiff (SSA:2010-180-02)

Medium (6.8) 54870 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 8.1 / 9.0 / 9.1 /
current : bind (SSA:2009-014-02)

Medium (6.8) 59478 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 /
9.0 / 9.1 / current : libtiff (SSA:2012-098-01)

Medium (6.8) 60112 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 /
8.1 / 9.0 / 9.1 / current : libpng (SSA:2012-206-01)

Medium (6.8) 82030 OpenSSL 0.9.8 < 0.9.8zf Multiple Vulnerabilities

Medium (6.8) 84151 OpenSSL 0.9.8 < 0.9.8zg Multiple Vulnerabilities

Medium (6.4) 40467 Apache 2.2.x < 2.2.12 Multiple Vulnerabilities

Medium (6.4) 54895 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 8.1 /
9.0 / 9.1 / current : bind (SSA:2010-350-01)

Medium (6.2) 49230 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 8.1 /
9.0 / 9.1 / current : sudo (SSA:2010-257-02)

5
Medium (5.8) 17762 OpenSSL < 0.9.8j Signature Spoofing

Medium (5.8) 54868 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 : bind
(SSA:2007-207-01)

Medium (5.1) 17765 OpenSSL < 0.9.8l Multiple Vulnerabilities

Medium (5.1) 49290 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 8.1 /
9.0 / 9.1 / current : bzip2 (SSA:2010-263-01)

Medium (5.1) 68915 Apache 2.2.x < 2.2.25 Multiple Vulnerabilities

Medium (5.0) 11213 HTTP TRACE / TRACK Methods Allowed

Medium (5.0) 17761 OpenSSL < 0.9.8i Denial of Service

Medium (5.0) 17763 OpenSSL < 0.9.8k Multiple Vulnerabilities

Medium (5.0) 25253 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 / current : libpng
(SSA:2007-136-01)

Medium (5.0) 26023 Apache 2.2.x < 2.2.6 Multiple Vulnerabilities (DoS, XSS, Info Disc)

Medium (5.0) 28295 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 / current : libpng
(SSA:2007-325-01)

Medium (5.0) 48205 Apache 2.2.x < 2.2.16 Multiple Vulnerabilities

Medium (5.0) 50070 Apache 2.2.x < 2.2.17 Multiple Vulnerabilities

Medium (5.0) 54866 Slackware 10.0 / 10.1 / 10.2 / 9.0 / 9.1 / current : bind DoS
(SSA:2006-257-01)

Medium (5.0) 54869 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 8.1 / 9.0 / 9.1 / current :
bind (SSA:2008-191-02)

Medium (5.0) 55834 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 /
8.1 / 9.0 / 9.1 / current : bind (SSA:2011-224-01)

Medium (5.0) 57791 Apache 2.2.x < 2.2.22 Multiple Vulnerabilities

Medium (5.0) 58564 OpenSSL < 0.9.8u Multiple Vulnerabilities

Medium (5.0) 59076 OpenSSL 0.9.8 < 0.9.8x DTLS CBC Denial of Service

Medium (5.0) 80566 OpenSSL 0.9.8 < 0.9.8zd Multiple Vulnerabilities (FREAK)

Medium (5.0) 87219 OpenSSL 0.9.8 < 0.9.8zh X509_ATTRIBUTE Memory Leak DoS

Medium (5.0) 88098 Apache Server ETag Header Information Disclosure

Medium (4.4) 51944 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 8.1 /
9.0 / 9.1 / current : sudo (SSA:2011-041-05)

Medium (4.3) 17696 Apache HTTP Server 403 Error Page UTF-7 Encoded XSS

Medium (4.3) 17756 OpenSSL < 0.9.7k / 0.9.8c PKCS Padding RSA Signature Forgery
Vulnerability

Medium (4.3) 17767 OpenSSL < 0.9.8p / 1.0.0e Double Free Vulnerability

Medium (4.3) 31118 Apache 2.2.x < 2.2.8 Multiple Vulnerabilities (XSS, DoS)

6
Medium (4.3) 31803 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 / current : bzip2
(SSA:2008-098-02)

Medium (4.3) 33477 Apache 2.2.x < 2.2.9 Multiple Vulnerabilities (DoS, XSS)

Medium (4.3) 39472 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 8.1 / 9.0 / 9.1 /
current : libpng (SSA:2009-170-01)

Medium (4.3) 53896 Apache 2.2.x < 2.2.18 APR apr_fnmatch DoS

Medium (4.3) 54867 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : bind (SSA:2006-310-01)

Medium (4.3) 54872 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 8.1 / 9.0 / 9.1 /
current : bind (SSA:2009-210-01)

Medium (4.3) 54879 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 8.1 /
9.0 / 9.1 / current : bind (SSA:2010-176-01)

Medium (4.3) 55735 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 13.1 / 13.37 /
8.1 / 9.0 / 9.1 / current : libpng (SSA:2011-210-01)

Medium (4.3) 56216 Apache 2.2.x < 2.2.21 mod_proxy_ajp DoS

Medium (4.3) 56996 OpenSSL < 0.9.8h Multiple Vulnerabilities

Medium (4.3) 57792 Apache HTTP Server httpOnly Cookie Information Disclosure

Medium (4.3) 64532 OpenSSL < 0.9.8y Multiple Vulnerabilities

Medium (4.3) 64912 Apache 2.2.x < 2.2.24 Multiple XSS Vulnerabilities

Medium (4.3) 73405 Apache 2.2.x < 2.2.27 Multiple Vulnerabilities

Medium (4.3) 78552 OpenSSL 0.9.8 < 0.9.8zc Multiple Vulnerabilities (POODLE)

Medium (4.0) 24659 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : tar (SSA:2006-335-01)

Low (2.6) 24658 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : screen
(SSA:2006-307-02)

Low (2.6) 24661 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : libpng
(SSA:2006-335-03)

Low (2.6) 54874 Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / 13.0 / 8.1 / 9.0 / 9.1 /
current : bind (SSA:2009-336-01)

Info 10092 FTP Server Detection

Info 10107 HTTP Server Type and Version

Info 10114 ICMP Timestamp Request Remote Date Disclosure

Info 10287 Traceroute Information

Info 11219 Nessus SYN scanner

Info 11424 WebDAV Detection

Info 11936 OS Identification

Info 12634 Authenticated Check : OS Name and Installed Package Enumeration

Info 19506 Nessus Scan Information

7
Info 22869 Software Enumeration (SSH)

Info 22964 Service Detection

Info 24260 HyperText Transfer Protocol (HTTP) Information

Info 25202 Enumerate IPv6 Interfaces via SSH

Info 25203 Enumerate IPv4 Interfaces via SSH

Info 25220 TCP/IP Timestamps Supported

Info 33276 Enumerate MAC Addresses via SSH

Info 35716 Ethernet Card Manufacturer Detection

Info 43111 HTTP Methods Allowed (per directory)

Info 45590 Common Platform Enumeration (CPE)

Info 52703 vsftpd Detection

Info 54615 Device Type

Info 55472 Device Hostname

Info 57323 OpenSSL Version Detection

Info 66334 Patch Report