Hi Sr: This vulnerabilities that you are explaining are very general, and can be applied to any box. and only can be against the administration interface. ( Usually behind a firewall , and only reached trough the used ports TCP 22,443,2998,901 using NAT).
Apache is used for the LMI interface, if you have at least the 1.2 firmware. ( >the web server throws the error message, which can be used >for enumeration of existing users in server. ). I am not expert in SSH, i think ISS will upgrade the version of SSh in they next release. >2. Vulnerability: Session key retrieval vulnerability. > > Description: Remote SSH daemon supports version 1.33 >and/or 1.5 which is not safe to use. Very General, can be more especific...? i think that the most of services are still accepting SSL 2.0 Conecctions for compatibility purpouse. >3. Vulnerability: Web server supporting weak encryption protocol. > > Description: The remote service accepts connection >encrypted using SSL 2.0 which is prone to several cryptographic flaws. If you still are confused, i think you may want to open a case at ISS Technical support. Regards JR "Jagadeeshan S" <[EMAIL PROTECTED]> on Miércoles, 16 de Mayo de 2007 at 13:51 -0400 wrote: >Hi, > > > >Can anybody provide solution for the scenario which I face? > >Some third-party has done Vulnerability Assessment and Penetration >Testing on my Proventia G100 box. > >The report shows the following vulnerabilities on the box. > > > >1. Vulnerability: Enumeration of user name through Apache Web >Server. > >Description: When tried to access the default home page, with random >user names, the web server throws the error message, which can be used >for enumeration of existing users in server. > > > >2. Vulnerability: Session key retrieval vulnerability. > > Description: Remote SSH daemon supports version 1.33 >and/or 1.5 which is not safe to use. > > > >3. Vulnerability: Web server supporting weak encryption protocol. > > Description: The remote service accepts connection >encrypted using SSL 2.0 which is prone to several cryptographic flaws. > > > >I was much confused about my box. > >Does the box can have such this type of vulnerability? If so, kindly >tell me how to remove such vulnerabilities. > >How does the box can have web server? > > > >Please explain in detail as I am in confused state. > > > > > >Regards, > >Jaggs. Juan Roa Salinas IEI - SOC Senior Manager - ISS-Certified Specialist (ISS-CS) Phone: (56 2) 6403981, (56 9) 7486538 e-mail: [EMAIL PROTECTED] web site: www.orion2000.com Orion 2000 S.A. - Chile Soluciones en Seguridad de la Informacion Empresa certificada BS 7799:2002 | ISO 9001:2000 ---------------------------------------------------- La informacion contenida en esta transmision es confidencial, amparada por secreto profesional y esta dirigida exclusivamente a el o los destinatarios indicados. Cualquier uso, reproduccion, divulgacion o distribucion por otras personas que su(s) destinatario(s) esta estrictamente prohibida. Las opiniones expresadas en este correo son las de su autor y no son necesariamente compartidas o apoyadas por la compania. --------------------------------------------------- _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
