Hi,
Can anybody provide solution for the scenario which I face?
Some third-party has done Vulnerability Assessment and Penetration
Testing on my Proventia G100 box.
The report shows the following vulnerabilities on the box.
1. Vulnerability: Enumeration of user name through Apache Web
Server.
Description: When tried to access the default home page, with random
user names, the web server throws the error message, which can be used
for enumeration of existing users in server.
2. Vulnerability: Session key retrieval vulnerability.
Description: Remote SSH daemon supports version 1.33
and/or 1.5 which is not safe to use.
3. Vulnerability: Web server supporting weak encryption protocol.
Description: The remote service accepts connection
encrypted using SSL 2.0 which is prone to several cryptographic flaws.
I was much confused about my box.
Does the box can have such this type of vulnerability? If so, kindly
tell me how to remove such vulnerabilities.
How does the box can have web server?
Please explain in detail as I am in confused state.
Regards,
Jaggs.
_______________________________________________
ISSForum mailing list
[email protected]
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to [EMAIL PROTECTED]
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
