|
|
| Port No | Protocol | Service | Details | ||
|---|---|---|---|---|---|
|
7 | tcp | echo | pingtest | |
|
13 | tcp | daytime | 13 APR 2003 11:55:06 BST | |
|
19 | tcp | chargen | )*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQR | |
|
20 | tcp | ftp | 220 ProFTPD 1.2.1 Server [192.168.0.101] | |
|
25 | tcp | smtp | 220 unhardened.example.com ESMTP Sendmail 8.12.8/8.12.8; Sun, 13 Apr 2003 11:49:20 +0100 | |
|
80 | tcp | http | Apache/1.3.26 (Unix) (Technologue/Linux) mod_ssl/2.8.10 OpenSSL/0.9.6 PHP/4.0.6 | |
|
111 | tcp | sunrpc | 9 services found | |
|
7 | udp | echo | pingtest | |
|
13 | udp | daytime | 13 APR 2003 11:55:06 BST | |
|
19 | udp | chargen | ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefgh | |
|
111 | udp | portmap | 9 services found | |
|
123 | udp | ntp | system="Linux2.4.18-27.7.x", statum=2 |
| Warning: You have high-risk (red) ports exposed to the internet. These may not represent a direct vulnerability but it is not common practice to expose these services. Consider restricting access to these ports. This will help to protect you against potential future vulnerabilities. |
| Vulnerability | 10884 | NTP Information Leakage
|
Low Risk |
|---|
| Description | It is possible to determine various details about the remote host by querying the NTP variables. This includes the OS, upstream NTP server and detailed clock information. An attacker can use this information to focus their attack strategy. | ||||
|---|---|---|---|---|---|
| Solution | Use a firewall to restrict NTP to trusted addresses, or configure ntpd to ignore info packets. | ||||
| First Found | 13 April 2003 | Port | 123/udp | Last 6 Months |
|