Danware NetOp Host HELO Request Remote Information Disclosure

Copyright (C) 2004-2016 Corsaire Limited and Danware Data A/S.


Synopsis :

Nessus was able to read basic information about the remote host.

Description :

This plugin displays the basic name and address information provided
by NetOp products for easy network browsing. Administrators should
disable displaying this information if they don't want it to be
visible.

Note that leaked private IP addresses are only an issue if the NetOp
product is listening on a public interface.

Solution :

Refer to the vendor documentation for instructions to disable the
information.

Risk factor :

Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N)
CVSS Temporal Score : 4.3
(CVSS2#E:H/RL:OF/RC:C)
Public Exploit Available : true

Family: Misc.

Nessus Plugin ID: 15767 ()

Bugtraq ID: 11710

CVE ID: CVE-2004-0950