Network UPS Tools Service STARTTLS Command Support

Info Nessus Plugin ID 59658

Synopsis

The remote service supports encrypting traffic.

Description

The remote Network UPS Tools service supports the use of the 'STARTTLS' command to switch from a cleartext to an encrypted communications channel.

Since Network UPS Tools provides no configuration setting for the server to require authentication to occur after the 'STARTTLS' command, it is recommended that 'CERTVERIFY' and 'FORCESSL' in client configuration files.

Solution

n/a

See Also

http://www.nessus.org/u?5a501865

https://networkupstools.org/docs/user-manual.chunked/ar01s09.html

Plugin Details

Severity: Info

ID: 59658

File Name: nut_starttls.nasl

Version: 1.4

Type: remote

Family: Misc.

Published: 2012/06/22

Modified: 2018/11/15

Dependencies: 11153

Risk Information

Risk Factor: Info

Vulnerability Information

CPE: cpe:/a:networkupstools:nut

Excluded KB Items: global_settings/disable_test_ssl_based_services