I will answer more in deep in a further message, but the box have a WebServer beacuse it needs in order to provide the Proventia Manager, wich is a Web Apllication. open a web browser an connect to your box! There is the Proventia Manager!
Tshuss! Saludos! ---------------------- Javier Reyna Padilla CCSA CCSE NSA WCSE Departamento de Seguridad Informatica Onlinet SA de CV www.onlinet.com.mx Jagadeeshan S wrote: > Hi, > > > > Can anybody provide solution for the scenario which I face? > > Some third-party has done Vulnerability Assessment and Penetration > Testing on my Proventia G100 box. > > The report shows the following vulnerabilities on the box. > > > > 1. Vulnerability: Enumeration of user name through Apache Web > Server. > > Description: When tried to access the default home page, with random > user names, the web server throws the error message, which can be used > for enumeration of existing users in server. > > > > 2. Vulnerability: Session key retrieval vulnerability. > > Description: Remote SSH daemon supports version 1.33 > and/or 1.5 which is not safe to use. > > > > 3. Vulnerability: Web server supporting weak encryption protocol. > > Description: The remote service accepts connection > encrypted using SSL 2.0 which is prone to several cryptographic flaws. > > > > I was much confused about my box. > > Does the box can have such this type of vulnerability? If so, kindly > tell me how to remove such vulnerabilities. > > How does the box can have web server? > > > > Please explain in detail as I am in confused state. > > > > > > Regards, > > Jaggs. > > > > > > _______________________________________________ > ISSForum mailing list > [email protected] > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > https://atla-mm1.iss.net/mailman/listinfo/issforum > > To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] > > The ISSForum mailing list is hosted and managed by Internet Security Systems, > 6303 Barfield Road, Atlanta, Georgia, USA 30328. > _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
