Your Company Scan Results - April 2011

Reference:

YC 201135

Sub-Report:

Unix

Vulnerability Statistics

10  13  12  6  12  0  3	High risk vulnerabilities found. Medium risk vulnerabilities found. Low risk vulnerabilities found. SANS vulnerabilities found. New vulnerabilities found. Urgent vulnerabilities found. Overdue vulnerabilities found.	4  2  0  4  6  0  0  2	Systems (67%) had high risk vulnerabilities. Systems (33%) had medium risk vulnerabilities. Systems (0%) had low risk vulnerabilities. Systems (67%) had SANS vulnerabilities. Systems (100%) had vulnerabilities. Systems (0%) had no vulnerabilities. Systems (0%) had urgent vulnerabilities. Systems (33%) had overdue vulnerabilities.	Scan Type Start Date End Date Report Generated Systems Scanned New Systems	Enterprise 13-Apr-11 11:54 16-Apr-11 16:32 08-Jun-11 10:50 6 1

Key	Increase	No change	Decrease	High Risk	Medium Risk	Low Risk	No Services	No Ports/Vulns	Not Subnet Scanned

Systems

Download As CSV...

Host Name	IP Address	Critical	Report	Ports	Vulnerabilities
www.yourcompany.co.uk	192.168.0.100		View	5	9 (5 New)
www.example.com	192.168.0.112		View	3	11 (4 New)
dns0.example.com	192.168.0.110		View	5	5 (1 New)
www.yourcompany.com	192.168.0.101		View	12	2 (2 New)
www.yourcompany.net	192.168.0.102		View	2	5
apollo.example.com	192.168.0.81		View	3	3

All Vulnerabilities

Frequency	Vulnerability	Severity
2	High Risk Ports Open	High Risk
1	Apache < 1.3.26 Chunked Encoding Vulnerability	High Risk
1	Authentication Bypass Through Cookie Manipulation	High Risk
1	BIND < 8.2.3 Buffer Overrun	High Risk
1	Possible Compromise	High Risk
1	Script Allows Arbitrary Command Execution	High Risk
1	Script Appears Vulnerable to SQL Injection	High Risk
1	Sensitive Information Leakage	High Risk
1	SNMP Default Community Names	High Risk
2	Apache < 1.3.27 Multiple Vulnerabilities	Medium Risk
1	Apache mod_ssl < 2.8.10 off by one Vulnerability	Medium Risk
1	Apache < 1.3.31, 2.0.49 Multiple Vulnerabilities	Medium Risk
1	Cross-Site Scripting	Medium Risk
1	DNS Zone Transfer	Medium Risk
1	Globally Useable Name Server	Medium Risk
1	OpenSSL < 0.9.6m, 0.9.7d Multiple Vulnerabilities	Medium Risk
1	Script Allows Arbitrary Redirection	Medium Risk
1	Service Permits Unauthenticated Users to Send Arbitrary Emails	Medium Risk
1	SSH Protocol Version 1 Enabled	Medium Risk
1	SSL Certificate Problems	Medium Risk
1	XPath Injection	Medium Risk
3	TRACE and/or TRACK Methods Enabled	Low Risk
2	Apache < 1.3.29 Multiple Local Flaws	Low Risk
2	Holes Detected in Firewall Configuration	Low Risk
1	Apache mod_userdir Information Leak	Low Risk
1	DNS Cache Snooping	Low Risk
1	NTP Information Leakage	Low Risk
1	Private IP Address Leakage	Low Risk
1	Script Calling phpinfo() Detected	Low Risk

Scans by Westpoint Ltd