pop3s (995/tcp) Port is open Plugin ID : 11219 A SSLv2 server answered on this port Plugin ID : 10330 A pop3 server is running on this port Plugin ID : 10330 Synopsis : The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service accepts connections encrypted using SSL 2.0, which reportedly suffers from several cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients. See Also : http://www.schneier.com/paper-ssl.pdf Solution: Consult the application's documentation to disable SSL 2.0 and use SSL 3.0 or TLS 1.0 instead. Risk Factor : Low / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) Plugin ID : 20007 Synopsis : A POP server is listening on the remote port Description : The remote host is running a POP server. Solution: Disable this service if you do not use it. Risk Factor : None Plugin output : Remote POP server banner : +OK Hello there. Plugin ID : 10185 imaps (993/tcp) Port is open Plugin ID : 11219 A SSLv2 server answered on this port Plugin ID : 10330 An IMAP server is running on this port through SSL Plugin ID : 10330 Synopsis : The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service accepts connections encrypted using SSL 2.0, which reportedly suffers from several cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients. See Also : http://www.schneier.com/paper-ssl.pdf Solution: Consult the application's documentation to disable SSL 2.0 and use SSL 3.0 or TLS 1.0 instead. Risk Factor : Low / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) Plugin ID : 20007 Synopsis : An IMAP server is running on the remote host. Description : An IMAP (Internet Message Access Protocol) server is installed and running on the remote host. Risk Factor : None Plugin output : The remote imap server banner is : * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE AUTH=PLAIN ACL ACL2=UNION] Courier-IMAP ready. Copyright 1998-2005 Double Precision, Inc. See COPYING for distribution information. Plugin ID : 11414 mysql (3306/tcp) Port is open Plugin ID : 11219 Synopsis : A Database server is listening on the remote port. Description : The remote host is running MySQL, an open-source Database server. It is possible to extract the version number of the remote installation by receiving the server greeting. Solution: Restrict access to the database to allowed IPs only. Risk Factor : None Plugin output : The remote MySQL version is 4.1.20-standard Plugin ID : 10719 imap (143/tcp) Port is open Plugin ID : 11219 An IMAP server is running on this port Plugin ID : 10330 Synopsis : An IMAP server is running on the remote host. Description : An IMAP (Internet Message Access Protocol) server is installed and running on the remote host. Risk Factor : None Plugin output : The remote imap server banner is : * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2005 Double Precision, Inc. See COPYING for distribution information. Plugin ID : 11414 pop3 (110/tcp) Port is open Plugin ID : 11219 A pop3 server is running on this port Plugin ID : 10330 Synopsis : A POP server is listening on the remote port Description : The remote host is running a POP server. Solution: Disable this service if you do not use it. Risk Factor : None Plugin output : Remote POP server banner : +OK Hello there. Plugin ID : 10185 http (80/tcp) The remote host is using a version of OpenSSL which is older than 0.9.6m or 0.9.7d There are several bug in this version of OpenSSL which may allow an attacker to cause a denial of service against the remote host. Nessus solely relied on the banner of the remote host to issue this warning Solution: Upgrade to version 0.9.6m (0.9.7d) or newer Risk Factor : High CVE : CVE-2004-0079, CVE-2004-0081, CVE-2004-0112 BID : 9899 Other references : IAVA:2004-B-0006 Plugin ID : 12110 The remote host is using the Apache mod_frontpage module. mod_frontpage older than 1.6.1 is vulnerable to a buffer overflow which may allow an attacker to gain root access. Since Nessus was not able to remotely determine the version of mod_frontage you are running, you are advised to manually check which version you are running as this might be a false positive. If you want the remote server to be remotely secure, we advise you do not use this module at all. Solution: Disable this module Risk Factor : High CVE : CVE-2002-0427 BID : 4251 Plugin ID : 11303 The remote host is using a version of OpenSSL which is older than 0.9.6j or 0.9.7b This version is vulnerable to a timing based attack which may allow an attacker to guess the content of fixed data blocks and may eventually be able to guess the value of the private RSA key of the server. An attacker may use this implementation flaw to sniff the data going to this host and decrypt some parts of it, as well as impersonate your server and perform man in the middle attacks. Nessus solely relied on the banner of the remote host to issue this warning See Also : http://www.openssl.org/news/secadv_20030219.txt http://lasecwww.epfl.ch/memo_ssl.shtml http://eprint.iacr.org/2003/052/ Solution: Upgrade to version 0.9.6j (0.9.7b) or newer Risk Factor : Medium CVE : CVE-2003-0078, CVE-2003-0131, CVE-2003-0147 BID : 6884, 7148 Other references : RHSA:RHSA-2003:101-01, SuSE:SUSE-SA:2003:024 Plugin ID : 11267 Port is open Plugin ID : 11219 A web server is running on this port Plugin ID : 10330 Directory index found at /sys_cpanel/images/ Directory index found at /sys_cpanel/ Directory index found at /sys_cpanel/css/ Directory index found at /sys_cpanel/html/ Plugin ID : 10662 The remote web server type is : Apache/1.3.37 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.4.7 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a Solution: You can set the directive 'ServerTokens Prod' to limit the information emanating from the server in its response headers. Plugin ID : 10107 nbx-ser (2095/tcp) Port is open Plugin ID : 11219 A web server is running on this port Plugin ID : 10330 The remote web server type is : cpsrvd/11.2.2 Plugin ID : 10107 eli (2087/tcp) Port is open Plugin ID : 11219 A SSLv2 server answered on this port Plugin ID : 10330 A web server is running on this port through SSL Plugin ID : 10330 Synopsis : The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service accepts connections encrypted using SSL 2.0, which reportedly suffers from several cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients. See Also : http://www.schneier.com/paper-ssl.pdf Solution: Consult the application's documentation to disable SSL 2.0 and use SSL 3.0 or TLS 1.0 instead. Risk Factor : Low / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) Plugin ID : 20007 The remote web server type is : cpsrvd/11.2.2 Plugin ID : 10107 gnunet (2086/tcp) Port is open Plugin ID : 11219 A web server is running on this port Plugin ID : 10330 The remote web server type is : cpsrvd/11.2.2 Plugin ID : 10107 radsec (2083/tcp) Port is open Plugin ID : 11219 A SSLv2 server answered on this port Plugin ID : 10330 A web server is running on this port through SSL Plugin ID : 10330 Synopsis : The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service accepts connections encrypted using SSL 2.0, which reportedly suffers from several cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients. See Also : http://www.schneier.com/paper-ssl.pdf Solution: Consult the application's documentation to disable SSL 2.0 and use SSL 3.0 or TLS 1.0 instead. Risk Factor : Low / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) Plugin ID : 20007 The remote web server type is : cpsrvd/11.2.2 Plugin ID : 10107 domain (53/tcp) Port is open Plugin ID : 11219 A DNS server is running on this port. If you do not use it, disable it. Risk Factor : Low Plugin ID : 11002 Synopsis : It is possible to obtain the version number of the remote DNS server. Description : The remote host is running BIND, an open-source DNS server. It is possible to extract the version number of the remote installation by sending a special DNS request for the text 'version.bind' in the domain 'chaos'. Solution: It is possible to hide the version number of bind by using the 'version' directive in the 'options' section in named.conf Risk Factor : None Plugin output: The version of the remote BIND server is : 9.2.4 Plugin ID : 10028 nbx-dir (2096/tcp) Port is open Plugin ID : 11219 A SSLv2 server answered on this port Plugin ID : 10330 A web server is running on this port through SSL Plugin ID : 10330 Synopsis : The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service accepts connections encrypted using SSL 2.0, which reportedly suffers from several cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients. See Also : http://www.schneier.com/paper-ssl.pdf Solution: Consult the application's documentation to disable SSL 2.0 and use SSL 3.0 or TLS 1.0 instead. Risk Factor : Low / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) Plugin ID : 20007 The remote web server type is : cpsrvd/11.2.2 Plugin ID : 10107 smtp (25/tcp) Port is open Plugin ID : 11219 This port was detected as being open by a port scanner but is now closed. This service might have been crashed by a port scanner or by a plugin Plugin ID : 10919 ssh (22/tcp) Port is open Plugin ID : 11219 An ssh server is running on this port Plugin ID : 10330 Remote SSH version : SSH-2.0-OpenSSH_3.9p1 Remote SSH supported authentication : publickey,gssapi-with-mic,password Plugin ID : 10267 The remote SSH daemon supports the following versions of the SSH protocol : . 1.99 . 2.0 SSHv2 host key fingerprint : 75:92:80:6f:1c:09:7c:7d:2c:56:4d:6b:cc:8c:45:3b Plugin ID : 10881 ftp (21/tcp) Port is open Plugin ID : 11219 An FTP server is running on this port. Here is its banner : 220---------- Welcome to Pure-FTPd [TLS] ---------- Plugin ID : 10330 Synopsis : An FTP server is listening on this port Description : It is possible to obtain the banner of the remote FTP server by connecting to the remote port. Risk Factor : None Plugin output : The remote FTP banner is : 220---------- Welcome to Pure-FTPd [TLS] ---------- Plugin ID : 10092 urd (465/tcp) Port is open Plugin ID : 11219 A SSLv2 server answered on this port Plugin ID : 10330 An SMTP server is running on this port through SSL Here is its banner : 220-basin.myserverhosts.com ESMTP Exim 4.68 #1 Tue, 06 Nov 2007 17:54:42 -0600 Plugin ID : 10330 Synopsis : The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service accepts connections encrypted using SSL 2.0, which reportedly suffers from several cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients. See Also : http://www.schneier.com/paper-ssl.pdf Solution: Consult the application's documentation to disable SSL 2.0 and use SSL 3.0 or TLS 1.0 instead. Risk Factor : Low / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) Plugin ID : 20007 Synopsis : An SMTP server is listening on the remote port. Description : The remote host is running a mail (SMTP) server on this port. Since SMTP servers are the targets of spammers, it is recommended you disable it if you do not use it. Solution: Disable this service if you do not use it, or filter incoming traffic to this port. Risk Factor : None Plugin output : Remote SMTP server banner : 220-basin.myserverhosts.com ESMTP Exim 4.68 #1 Tue, 06 Nov 2007 17:54:42 -0600 Plugin ID : 10263 https (443/tcp) The remote host is using a version of OpenSSL which is older than 0.9.6m or 0.9.7d There are several bug in this version of OpenSSL which may allow an attacker to cause a denial of service against the remote host. Nessus solely relied on the banner of the remote host to issue this warning Solution: Upgrade to version 0.9.6m (0.9.7d) or newer Risk Factor : High CVE : CVE-2004-0079, CVE-2004-0081, CVE-2004-0112 BID : 9899 Other references : IAVA:2004-B-0006 Plugin ID : 12110 The remote host is using the Apache mod_frontpage module. mod_frontpage older than 1.6.1 is vulnerable to a buffer overflow which may allow an attacker to gain root access. Since Nessus was not able to remotely determine the version of mod_frontage you are running, you are advised to manually check which version you are running as this might be a false positive. If you want the remote server to be remotely secure, we advise you do not use this module at all. Solution: Disable this module Risk Factor : High CVE : CVE-2002-0427 BID : 4251 Plugin ID : 11303 The remote host is using a version of OpenSSL which is older than 0.9.6j or 0.9.7b This version is vulnerable to a timing based attack which may allow an attacker to guess the content of fixed data blocks and may eventually be able to guess the value of the private RSA key of the server. An attacker may use this implementation flaw to sniff the data going to this host and decrypt some parts of it, as well as impersonate your server and perform man in the middle attacks. Nessus solely relied on the banner of the remote host to issue this warning See Also : http://www.openssl.org/news/secadv_20030219.txt http://lasecwww.epfl.ch/memo_ssl.shtml http://eprint.iacr.org/2003/052/ Solution: Upgrade to version 0.9.6j (0.9.7b) or newer Risk Factor : Medium CVE : CVE-2003-0078, CVE-2003-0131, CVE-2003-0147 BID : 6884, 7148 Other references : RHSA:RHSA-2003:101-01, SuSE:SUSE-SA:2003:024 Plugin ID : 11267 Port is open Plugin ID : 11219 A SSLv2 server answered on this port Plugin ID : 10330 A web server is running on this port through SSL Plugin ID : 10330 Synopsis : The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service accepts connections encrypted using SSL 2.0, which reportedly suffers from several cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients. See Also : http://www.schneier.com/paper-ssl.pdf Solution: Consult the application's documentation to disable SSL 2.0 and use SSL 3.0 or TLS 1.0 instead. Risk Factor : Low / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) Plugin ID : 20007 Synopsis : The remote service supports the use of weak SSL ciphers. Description : The remote host supports the use of SSL ciphers that offer either weak encryption or no encryption at all. See Also : http://www.openssl.org/docs/apps/ciphers.html Solution: Reconfigure the affected application if possible to avoid use of weak ciphers. Risk Factor : Low / CVSS Base Score : 2 (AV:R/AC:L/Au:NR/C:P/A:N/I:N/B:N) Plugin output : Here is a list of the SSL ciphers supported by the remote server : Export Ciphers SSLv2 EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export SSLv3 EXP-EDH-RSA-DES-CBC-SHA Kx=DH(512) Au=RSA Enc=DES(40) Mac=SHA1 export EXP-DES-CBC-SHA Kx=RSA(512) Au=RSA Enc=DES(40) Mac=SHA1 export EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export TLSv1 EXP-EDH-RSA-DES-CBC-SHA Kx=DH(512) Au=RSA Enc=DES(40) Mac=SHA1 export EXP1024-DES-CBC-SHA Kx=RSA(1024) Au=RSA Enc=DES(56) Mac=SHA1 export EXP1024-RC2-CBC-MD5 Kx=RSA(1024) Au=RSA Enc=RC2(56) Mac=MD5 export EXP1024-RC4-MD5 Kx=RSA(1024) Au=RSA Enc=RC4(56) Mac=MD5 export EXP1024-RC4-SHA Kx=RSA(1024) Au=RSA Enc=RC4(56) Mac=SHA1 export EXP-DES-CBC-SHA Kx=RSA(512) Au=RSA Enc=DES(40) Mac=SHA1 export EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export Low Strength Ciphers (excluding export, < 128-bit key) SSLv2 DES-CBC-MD5 Kx=RSA Au=RSA Enc=DES(56) Mac=MD5 RC4-64-MD5 Kx=RSA Au=RSA Enc=RC4(64) Mac=MD5 SSLv3 EDH-RSA-DES-CBC-SHA Kx=DH Au=RSA Enc=DES(56) Mac=SHA1 DES-CBC-SHA Kx=RSA Au=RSA Enc=DES(56) Mac=SHA1 TLSv1 EDH-RSA-DES-CBC-SHA Kx=DH Au=RSA Enc=DES(56) Mac=SHA1 DES-CBC-SHA Kx=RSA Au=RSA Enc=DES(56) Mac=SHA1 Medium Strength Ciphers (128-bit key) SSLv2 RC2-CBC-MD5 Kx=RSA Au=RSA Enc=RC2(128) Mac=MD5 RC4-MD5 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5 SSLv3 RC4-MD5 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5 RC4-SHA Kx=RSA Au=RSA Enc=RC4(128) Mac=SHA1 TLSv1 RC4-MD5 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5 RC4-SHA Kx=RSA Au=RSA Enc=RC4(128) Mac=SHA1 High Strength Ciphers (> 128-bit key) SSLv2 DES-CBC3-MD5 Kx=RSA Au=RSA Enc=3DES(168) Mac=MD5 SSLv3 EDH-RSA-DES-CBC3-SHA Kx=DH Au=RSA Enc=3DES(168) Mac=SHA1 DES-CBC3-SHA Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1 TLSv1 EDH-RSA-DES-CBC3-SHA Kx=DH Au=RSA Enc=3DES(168) Mac=SHA1 DHE-RSA-AES128-SHA Kx=DH Au=RSA Enc=AES(128) Mac=SHA1 DHE-RSA-AES256-SHA Kx=DH Au=RSA Enc=AES(256) Mac=SHA1 DES-CBC3-SHA Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1 AES128-SHA Kx=RSA Au=RSA Enc=AES(128) Mac=SHA1 AES256-SHA Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1 The fields above are : {OpenSSL ciphername} Kx={key exchange} Au={authentication} Enc={symmetric encryption method} Mac={message authentication code} {export flag} Plugin ID : 21643 Here is the SSLv2 server certificate: Certificate: Data: Version: 3 (0x2) Serial Number: 0 (0x0) Signature Algorithm: sha1WithRSAEncryption Issuer: C=GB, ST=Berkshire, L=Newbury, O=My Company Ltd, CN=basin.myserverhosts.com Validity Not Before: Apr 30 12:19:34 2007 GMT Not After : Apr 29 12:19:34 2008 GMT Subject: C=GB, ST=Berkshire, L=Newbury, O=My Company Ltd, CN=basin.myserverhosts.com Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (1024 bit) Modulus (1024 bit): 00:dc:60:6e:b3:58:9c:c0:47:70:4c:e9:8a:dc:5e: f4:1f:04:aa:46:f6:05:19:8b:6b:48:5c:fb:e9:f5: 47:d1:84:a2:7f:66:71:b1:72:d6:1c:ff:06:2a:9e: 82:12:67:1e:c5:c1:42:35:6d:d1:5c:a4:e9:17:90: 3d:32:e1:38:6a:53:70:15:10:15:04:72:12:f3:6f: 16:ae:9e:8f:e9:be:77:9c:6d:80:f9:63:6a:ec:f4: 2d:be:93:f4:6b:7d:28:8d:b2:7a:d9:35:e8:3d:e8: 8e:74:c8:a7:93:de:51:e9:95:89:5f:fa:31:3a:41: 29:7c:b6:a2:9b:0c:00:2e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D2:6E:A9:9F:82:E1:48:0E:3B:69:46:B8:F9:C7:5F:89:A9:75:DD X509v3 Authority Key Identifier: keyid:2B:D2:6E:A9:9F:82:E1:48:0E:3B:69:46:B8:F9:C7:5F:89:A9:75:DD DirName:/C=GB/ST=Berkshire/L=Newbury/O=My Company Ltd/CN=basin.myserverhosts.com serial:00 X509v3 Basic Constraints: CA:TRUE Signature Algorithm: sha1WithRSAEncryption 48:7e:5e:6f:06:c9:01:a6:22:95:1c:c7:2a:f0:a6:7e:29:54: b2:0f:cc:6c:70:0d:72:b0:d1:7a:cd:f3:7a:25:2b:92:e6:62: 6c:29:ab:6f:d4:78:5c:90:90:22:79:46:9b:26:18:4b:e7:e8: 35:a4:7a:51:1f:f4:56:c4:67:3c:01:d5:04:49:dd:c4:a1:62: 66:a0:a4:bf:35:c9:3f:f9:0e:06:d0:95:56:51:5b:e7:fa:43: 92:f4:dc:37:c4:73:4e:db:30:9f:1a:a6:e8:83:0a:01:89:3f: 82:12:73:ae:63:3a:5b:82:b7:3b:a5:23:55:2d:a6:99:ba:a7: 17:27 This SSLv2 server also accepts SSLv3 connections. This SSLv2 server also accepts TLSv1 connections. Plugin ID : 10863 The following directories were discovered: /cgi-bin, /cgi-sys While this is not, in and of itself, a bug, you should manually inspect these directories to ensure that they are in compliance with company security standards Other references : OWASP:OWASP-CM-006 Plugin ID : 11032 The remote web server type is : Apache/1.3.37 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 PHP/4.4.7 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a Solution: You can set the directive 'ServerTokens Prod' to limit the information emanating from the server in its response headers. Plugin ID : 10107 infowave (2082/tcp) Port is open Plugin ID : 11219 A web server is running on this port Plugin ID : 10330 The remote web server type is : cpsrvd/11.2.2 Plugin ID : 10107 domain (53/udp) A DNS server is running on this port. If you do not use it, disable it. Risk Factor : Low Plugin ID : 11002 The remote name server could be fingerprinted as being : ISC BIND 9.2.3 Plugin ID : 11951 general/udp For your information, here is the traceroute from 192.168.0.139 to 74.200.205.186 : 192.168.0.139 192.168.0.1 ? 192.168.249.94 192.168.15.125 192.168.15.121 192.168.15.117 192.168.15.105 208.48.250.62 208.48.250.61 64.209.102.46 216.52.128.78 216.52.130.166 74.200.193.5 74.200.205.186 Plugin ID : 10287 general/tcp 74.200.205.186 resolves as basin.myserverhosts.com. Plugin ID : 12053 Information about this scan : Nessus version : 3.0.5 Plugin feed version : 200609281415 Type of plugin feed : Registered (7 days delay) Scanner IP : 192.168.0.139 Port scanner(s) : synscan Port range : default Thorough tests : no Experimental tests : no Paranoia level : 1 Report Verbosity : 1 Safe checks : yes Max hosts : 20 Max checks : 4 Scan Start Date : 2007/11/6 21:00 Scan duration : 1467 sec Plugin ID : 19506