The version of Apple iTunes on the remote host is prior to version 10.2. It is, therefore, affected by multiple vulnerabilities in the WebKit, ImageIO, and libxml components. Note that these only affect iTunes for Windows.

The remote host appears to be running Vuze, a BitTorrent client used for peer-to-peer file-sharing.

Note that, due to the peer-to-peer nature of the application, any user connecting to the P2P network may consume a large amount of bandwidth.

The remote host is participating in a Distributed Hash Table (DHT) network, an indication of a peer-to-peer file-sharing application is running on the host.  Specifically, this host is using Mainline DHT, an implementation developed by the original BitTorrent client and adopted by some others. 

Note that, due to the peer-to-peer nature of the application, any user connecting to the P2P network may consume a large amount of bandwidth.

The remote host is running BitTorrent or uTorrent, peer-to-peer file sharing applications.

Note that, due to the peer-to-peer nature of these applications, any user connecting to the BitTorrent network may consume a large amount of bandwidth.

SoMud, a cross-platform peer-to-peer download and file sharing application, is installed on the remote Windows host.

The version of Apple iTunes on the remote host is prior to version 10.0. It is, therefore, affected by multiple vulnerabilities in the WebKit component. Note that these only affect WebKit for Windows.

The version of Apple iTunes on the remote host is prior to version 9.2.1. It is, therefore, affected by a buffer overflow vulnerability in the handling of 'itpc:' URLs. By convincing a user to click on a specially crafted link, a remote attacker can cause a denial of service or execute arbitrary code.

The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities :

  - A heap-based buffer overflow vulnerability exists in the     handling of images with an embedded ColorSync profile.
    By using a specially crafted image, a remote attacker     can exploit this to cause a denial of service or execute     arbitrary code. (CVE-2009-1726)

  - Multiple integer overflow vulnerabilities exist in     ImageIO's handling of TIFF files. By using a specially     crafted TIFF file, a remote attacker can exploit these     to cause a denial of service or execute arbitrary code.
    (CVE-2010-1411)

  - The WebKit component contains multiple vulnerabilities     that can be exploited, including the execution of     arbitrary code.
    (CVE-2010-0544, CVE-2010-1119, CVE-2010-1387,     CVE-2010-1390, CVE-2010-1392, CVE-2010-1393,     CVE-2010-1395, CVE-2010-1396, CVE-2010-1397,     CVE-2010-1398, CVE-2010-1399, CVE-2010-1400,     CVE-2010-1401, CVE-2010-1402, CVE-2010-1403,     CVE-2010-1404, CVE-2010-1405, CVE-2010-1408,     CVE-2010-1409, CVE-2010-1410, CVE-2010-1412,     CVE-2010-1414, CVE-2010-1415, CVE-2010-1416,     CVE-2010-1417, CVE-2010-1418, CVE-2010-1419,     CVE-2010-1421, CVE-2010-1422, CVE-2010-1749,     CVE-2010-1758, CVE-2010-1759, CVE-2010-1761,     CVE-2010-1763, CVE-2010-1769, CVE-2010-1770,     CVE-2010-1771, CVE-2010-1774)

The version of Apple iTunes on the remote host is prior to version 9.1. It is, therefore, affected by multiple vulnerabilities :

  - A buffer underflow in ImageIO's handling of TIFF images     can lead to a denial of service or arbitrary code     execution. (CVE-2009-2285)

  - An integer overflow in the application's handling of     images with an embedded color profile can lead to a     denial of service or arbitrary code execution.
    (CVE-2010-0040)

  - An uninitialized memory access vulnerability in     ImageIO's handling of BMP images can result in the     sending of sensitive data from Safari's memory to     a website under an attacker's control. (CVE-2010-0041)

  - An uninitialized memory access vulnerability in     ImageIO's handling of TIFF images can result in the     sending of sensitive data from Safari's memory to     a website under an attacker's control. (CVE-2010-0042)

  - A memory corruption vulnerability in the ImageIO's     handling of TIFF images can lead to a denial of     service or arbitrary code execution. (CVE-2010-0043)

  - An infinite loop vulnerability in the application's     handling of imported MP4 podcast files can lead to a     denial of service or arbitrary code execution.
    (CVE-2010-0531)

  - A race condition during the installation process     allows a local attacker to modify an unspecified file     which can then be executed with SYSTEM privileges.
    (CVE-2010-0532)

  - A path searching vulnerability exists that allows code     execution if an attacker places a specially crafted DLL     in a directory and has a user open another file using     iTunes in that directory. (CVE-2010-1795)

  - Syncing a mobile device can allow a local attacker to     gain the privileges of the console user due to an     insecure file operation in the handling of log files.
    (CVE-2010-1768)

According to its version, the eMule Web Server listening on this port contains a buffer overflow vulnerability in the 'DecodeBase16' function due to a lack of length checks on its inputs.  An anonymous remote attacker may be able to leverage this issue to execute arbitrary code on the affected host.

The version of Apple iTunes on the remote host is prior to version 9.0.1. It is, therefore, affected by a buffer overflow vulnerability involving the handling of PLS files. By convincing a user to open a specially crafted PSL file, a remote attacker can cause a denial of service or execute arbitrary code with the user's level of privileges.

The version of Apple iTunes on the remote host is prior to version 8.2. It is, therefore, affected by a stack-based buffer overflow that can be triggered when parsing 'itms:' URLs. By convincing a user to click on a specially crafted link, a remote attacker can cause a denial of service or execute arbitrary code with the user's level of privileges.

Soulseek, a peer-to-peer (P2P) file-sharing application is installed on the remote system.

The version of Apple iTunes on the remote host is prior to version 8.1. It is, therefore, affected by multiple vulnerabilities :

  - A remote attacker can cause a denial of service by     sending a maliciously crafted DAAP message. Note that     this vulnerability only affects iTunes running on a     Windows host. (CVE-2009-0016)

  - When subscribing to a podcast, an authentication dialog     may be presented to the user without clarifying the     origin of the authentication request. An attacker could     exploit this flaw in order to steal the user's iTunes     credentials. (CVE-2009-0143)

According to its banner, the remote web server is from GigaTribe, a private peer-to-peer file sharing application.

The version of Apple iTunes on the remote host is prior to version 8.0. It is, therefore, affected by an integer buffer overflow vulnerability in an included third party driver. A local user can exploit this to gain system privileges.

The remote web server is an OFFSystem client.  OFFSystem (Owner-Free Filesystem) is a distributed filesystem for peer-to-peer file sharing in which files are stored as randomized data blocks

Orb is installed on the remote Windows host. Orb is a peer-to- peer file sharing application for 'mycasting' digital content from a PC.

iMesh is installed on the remote Windows host. iMesh is a peer-to- peer file sharing application.

Make sure the use of this program fits with your corporate security policy.

The version of PeerCast installed on the remote host fails to check the length of user-supplied data in its 'handshakeHTTP' function in 'servhs.cpp' before copying it to the 'loginPassword' and 'loginMount' heap-based buffers.  An unauthenticated attacker can leverage this issue to crash the affected application or execute arbitrary code on the remote host, subject to the privileges under which PeerCast operates.

The version of Apple iTunes on the remote host is prior to version 7.4. It is, therefore, affected by a heap overflow vulnerability when it parses specially crafted MP4/AAC files. By convincing a user into opening such a file, a remote attacker can execute arbitrary code with the same level of privileges as the user.

uTorrent, peer-to-peer file sharing software, is installed on the remote Windows host.

The version of Apple iTunes running on the remote host is affected by an integer overflow vulnerability when it parses specially crafted AAC files. By convincing a user to open such a file, a remote attacker can execute arbitrary code with the same level of privileges as the user.

The version of PeerCast installed on the remote host copies the supplied option string without limit into a finite-size buffer.  An unauthenticated attacker can leverage this issue to crash the affected application and possibly to execute arbitrary code on the remote host subject to the privileges of the user running PeerCast.

BitTornado is installed on the remote Windows host. BitTornado is a peer-to-peer file sharing application that supports the BitTorrent protocol.

Make sure the use of this program fits with your corporate security policy.

BitLord is installed on the remote Windows host. BitLord is a freeware peer-to-peer file sharing application that supports the BitTorrent protocol.

Make sure the use of this program fits with your corporate security policy.

Vuze (formerly Azureus), peer-to-peer file sharing software, is installed on the remote Windows host.

BitTorrent, peer-to-peer file sharing software, is installed on the remote Windows host.

The version of BitComet installed on the remote Windows host has a buffer overflow flaw that could be triggered using a .torrent with a specially crafted publisher's name to crash the application or even execute arbitrary code remotely subject to the user's privileges.

BitComet is installed on the remote host. BitComet is a freeware peer-to-peer file sharing application for Windows.

Make sure the use of this program fits with your corporate security policy.

According to its banner, the version of Apple iTunes for Windows on the remote host launches a helper application by searching for it through various system paths. By placing a malicious program in a system path, an attacker with local access can exploit this behavior to execute code before the helper application and thereby gain privileges.

Apple iTunes, a popular media player, is running on the remote host.
Additionally, it is configured to stream music between hosts. This functionality may not be in compliance with your corporate security policy regarding file sharing or network usage.

Mercora IMRadio is installed on the remote host.  Mercora is an Internet radio tuner that also provides music sharing, instant messaging, chat, and forum capabilities.  This software may not be suitable for use in a business environment.

Ares Fileshare is installed on the remote host.  Ares Fileshare is a P2P application that supports connecting to several P2P networks; eg, Gnutella and OpenFT.  As such, it may not be suitable for use in a business environment. 

In addition, note that it's not possible for Nessus to determine the installed version of Ares Fileshare and that some versions suffer from remotely exploitable vulnerabilities; eg, Bugtraq 14377.

This product has been discontinued and is no longer supported.

The remote host is running PeerCast, a peer-to-peer software package that lets users broadcast streaming media.

The version of PeerCast installed on the remote host suffers from a format string vulnerability.  An attacker can issue requests containing format specifiers that will crash the server and potentially permit arbitrary code execution subject to privileges of the user under which the affected application runs.

DC++ is installed on the remote host.  DC++ is an open source client for the Direct Connect peer-to-peer file-sharing protocol and may not be suitable for use in a business environment.

According to its version number, the DC++ client installed on the remote host is affected by a vulnerability that may let a remote user append data to files anywhere on the drive on which DC++ is installed.

The remote host is running Open DC Hub, a peer-to-peer file sharing application, which is vulnerable to a remote buffer overflow. A successful exploit would allow a remote attacker to execute code on the remote host.

It must be noted that the remote attacker needs administrative access to this application.

The remote host runs Xedus Peer-to-Peer web server.
This version is vulnerable to cross-site scripting attacks.

With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity.

The remote host runs Xedus Peer-to-Peer web server.  This version is vulnerable to a denial of service. An attacker could stop the web server from accepting user requests by establishing multiple connections from the same host.

The remote host runs Xedus Peer-to-Peer web server.  This version is vulnerable to directory traversal.  An attacker could send a specially crafted URL to view arbitrary files on the system.

The remote host runs Xedus Peer-to-Peer web server. It provides the ability to share files, music, and any other media, as well as create robust and dynamic websites, which can feature database access and file system access, with full .NET support.

A Direct Connect 'hub' (or server) is running on this port.  Direct Connect is a protocol used for peer-to-peer file-sharing as well as chat, and a hub routes communications among peers.  While any type of file may be shared, Direct Connect hubs often handle movies, images, music files, and games, which may not be suitable for use in a business environment.

The remote server seems to be a WinMX Peer-to-Peer client, which may not be suitable for a business environment.

Shareaza is installed on the remote host. Shareaza is an open source peer-to-peer file sharing application for Windows and, as such, may not be suitable for use in a business environment.

The remote server seems to be a Overnet peer-to-peer client, which may not be suitable for a business environment.

The remote service seems to be a Kazaa peer-to-peer client.

The FastTrack (FT) network code, as used in Kazaa and possibly other P2P clients, contains a remotely exploitable flaw in its packet handling code.  Sending a specially crafted packet with a large list of supernodes may allow execution of arbitrary code.

The remote host is running the Gnutella servent service.

It seems that the root directory of the remote host is visible through this service. Confidential files might be exported.

It was possible to disable the remote eMule client by connecting to this port and sending malformed data.

ID	Name	Severity
52535	Apple iTunes < 10.2 Multiple Vulnerabilities (uncredentialed check)	high
50971	Vuze Detection	info
50677	BitTorrent Mainline DHT Detection	info
50676	BitTorrent / uTorrent Detection	info
49288	SoMud Detection	info
49087	Apple iTunes < 10.0 Multiple Vulnerabilities (uncredentialed check)	high
47763	Apple iTunes < 9.2.1 'itpc:' Buffer Overflow (uncredentialed check)	high
47038	Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)	high
45391	Apple iTunes < 9.1 Multiple Vulnerabilities (uncredentialed check)	high
42833	eMule IRC Module / Web Server DecodeBase16 Function Remote Overflow	high
41061	Apple iTunes < 9.0.1 PLS File Buffer Overflow (uncredentialed check)	high
38986	Apple iTunes < 8.2 itms: URI Handling Overflow (uncredentialed check)	high
38948	Soulseek Detection	info
35914	Apple iTunes < 8.1 Multiple Vulnerabilities (uncredentialed check)	medium
35468	GigaTribe Detection	info
34158	Apple iTunes < 8.0 Integer Buffer Overflow (uncredentialed check)	high
33228	Owner Free File System Client Detection	info
31651	Orb Detection	info
29729	iMesh P2P Client Detection	info
29726	PeerCast servhs.cpp handshakeHTTP Function SOURCE Request Remote Overflow	high
26000	Apple iTunes < 7.4 Malformed Music File Heap Overflow (uncredentialed check)	high
24341	uTorrent Installed	info
21783	Apple iTunes AAC File Parsing Integer Overflow (uncredentialed check)	medium
21041	PeerCast procConnectArgs() Function URL Handling Remote Overflow	high
20846	BitTornado Detection	info
20845	BitLord Detection	info
20844	Vuze Installed	info
20843	BitTorrent Installed	info
20749	BitComet Client .torrent URI Handling Overflow	high
20748	BitComet Detection	info
20218	Apple iTunes For Windows iTunesHelper.exe Path Subversion Local Privilege Escalation (uncredentialed check)	high
20217	Apple iTunes Music Sharing Enabled	info
19585	Mercora IMRadio Detection	info
19386	Ares Fileshare Detection	info
18418	PeerCast Detection	info
18417	PeerCast URL Error Message Format String	high
18016	DC++ Detection	info
18012	DC++ Download Drive Arbitrary File Appending	medium
15834	Open DC Hub RedirectAll Value Remote Overflow	high
14647	Xedus Webserver Multiple XSS	medium
14646	Xedus Webserver Connection Saturation DoS	high
14645	Xedus Web Server Traversal Arbitrary File Access	medium
14644	Xedus Detection	info
13751	Direct Connect Hub Detection	info
11847	WinMX Detection (uncredentialed check)	medium
11846	Shareaza Detection	info
11845	Overnet Detection	info
11844	FastTrack (FT) Crafted Packet Handling Remote Overflow	high
11716	Gnutella Root Directory Misconfiguration	high
11473	eMule Malformed Data Handling Remote DoS	medium

Detections

Analytics

Peer-To-Peer File Sharing Family for Nessus

high

info

info

info

info

high

high

high

high

high

high

high

info

medium

info

high

info

info

info

high

high

info

medium

high

info

info

info

info

high

info

high

info

info

info

info

high

info

medium

high

medium

high

medium

info

info

medium

info

info

high

high

medium