One or more Java RMI remote objects are listening on the remote host. They may be used by Java applications to invoke methods on those objects remotely.

The remote host is running Macromedia ColdFusion MX, a commercial application server and website development framework.

The remote host is running a Windows RPC service. This service replies to the RPC Bind Request with a Bind Ack response.

However it is not possible to determine the uuid of this service.

The remote host appears to be running an HP OpenView product.

This specific service is an HTTP server.  By sending special requests (version, info, status, ping, services, ...), it is possible to obtain information about the remote host.

The remote host is running a Zend Session Clustering daemon, a component of the Zend Platform used to synchronize session data across a cluster of PHP servers.

The remote host is running either a Firebird or an InterBase database server.

The remote host is running Informix, an online transaction processing (OLTP) data server from IBM.

The remote host is running an RMI registry, which acts as a bootstrap naming service for registering and retrieving remote objects with simple names in the Java Remote Method Invocation (RMI) system.

The remote host is running a monitoring agent from eIQnetworks Enterprise Security Analyzer (ESA), a security information and event management application. 

Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet FortiReporter, and iPolicy Security Reporter.

The remote host is running the server component of Hobbit Monitor, an open source application and network monitoring tool.

The remote host is running a topology server from eIQnetworks Enterprise Security Analyzer (ESA), a security information and event management application.

The remote host is running a license manager for eIQnetworks Enterprise Security Analyzer (ESA), a security information and event management application. 

Note that eIQnetworks Enterprise Security Analyzer is also included in third-party products such as Astaro Report Manager, Fortinet FortiReporter, and iPolicy Security Reporter.

Plugin has been deprecated as the software is EOL and no longer obtainable

The remote host is running an Oracle database server. 

It may be possible to extract the version number of the remote TNS (Transparent Network Substrate) listener by sending a 'VERSION' request to the TNS listener service operating on this port. 

Note that the version of the TNS listener does not necessarily reflect the version of the Oracle database it provides access to.

The remote host is running TrendMicro OfficeScan client, an embedded HTTP server used by TrendMicro antivirus software.

The remote host is running a Rendezvous daemon on the specified port. Rendezvous is a commercial messaging software product used for building distributed applications, and a Rendezvous daemon is the central communications component of the software.

The remote host is running gdbserver, a program which can be used to run the GDB debugger on a different machine than the one which is running the program being debugged.

Since gdbserver offers no authentication whatsoever, an attacker may connect to this port, change the value of the registers and the memory of the process being debugged, and therefore be able to execute arbitrary code on the remote host with the privileges of the process being debugged.

The remote host is running Novell Messenger Messaging Agent, an enterprise instant messaging server for Windows, Linux, and NetWare.

The remote host is running Novell Messenger Archive Agent, an enterprise instant messaging server for Windows, Linux, and NetWare.

The remote host is running SMART Technologies SynchronEyes Teacher. This software allows teachers to remotely control student desktops.

The remote host is running SMART Technologies SynchronEyes Student.
This software allows teacher to remotely control student desktops and/or allow students to join a class.

The remote host is running Skype, a peer-to-peer Voice over Internet Protocol (VoIP) application. 

By connecting to the remote port, it is possible to query the remote service to obtain the stack version and its timestamp.

The remote host is running an AJP (Apache JServ Protocol) connector, a service by which a standalone web server such as Apache communicates over TCP with a Java servlet container such as Tomcat.

The remote host is running a Retrospect backup client. Retrospect is a commercial backup product from EMC / Dantz.

The remote host is running a Lightweight Directory Access Protocol (LDAP) server. LDAP is a protocol for providing access to directory services over TCP/IP.

The Inter-Asterisk eXchange protocol (IAX2) is used by the Asterisk PBX Server and other IP telephony clients/servers to enable voice communication between them.

The remote host is a TiVo, a personal video recorder.

The remote host is running the CA DMPrimer service (DM Deployment Common Component). 

This service is bundled with products such as BrightStor ARCserve Backup for Laptops & Desktops, Unicenter Remote Control, CA Protection Suite, etc...

The remote host is running a CORBA Internet Inter-ORB Protocol (IIOP) listener on the specified port.  CORBA is a vendor-independent architecture for applications that work together, and IIOP is a protocol by which such applications can communicate over TCP/IP.

The remote host is running Eudora Internet Mail Server, a mail server for Macs, and its Admin server is listening on this port.  Since the Admin server is used to administer the mail server, possibly remotely, you should limit access to it.

This product is used to deploy easily and quickly latest Microsoft product updates.

The remote host is an Airport, Airport Extreme or Airport Express wireless access point.  It is possible to gather information about the remote base station (such as its connection type or connection time) by sending packets to UDP port 192. 

An attacker connected to this network may also use this protocol to force the base station to disconnect from the network if it is using PPPoE, thus causing a denial of service for the other users.

The remote host is running a Network Block Device (NBD) server, which allows one Linux host to use another as one of its block devices.

The authentication daemon for VMware ESX or GSX was detected on the remote host.

The remote host is an HP Integrated Lights-Out (iLO) server. These servers are embedded systems integrated into HP ProLiant servers for the purpose of out-of-band management.

The remote host is running the VERITAS NetBackup Volume Manager service.

The remote host is running a GO-Global server, a commercial thin- client computing solution for Windows and unix.

The remote host is running a Backup Agent that uses the Network Data Management Protocol (NDMP).

The remote host is running a Cheops NG agent.  Cheops NG is an open source network management tool, and the cheops-agent provides a way for remote hosts to communicate with the tool and use it to map your network, port scan machines and identify running services.

The remote host is running the VERITAS NetBackup Java Console service. This service is used by the NetBackup Java Console GUI to manage the backup server. A user, authorized to connect to this service, can use it as a remote shell with system privileges by sending 'command_EXEC_LIST' messages.

The remote host is running the Computer Associate Message Queuing service (CAM). 

This service is available with products like Unicenter TNG, Unicenter NSM, and BrightStor SAN Manager.

The remote host is running TrendMicro OfficeScan client, an embedded HTTP server used by TrendMicro Antivirus software.

The remote host is running a YIFF sound server, an open source network sound server.

The remote host is running a VLAN Management Policy Server (VMPS), which is used for assigning switch ports to specific VLANs based on the MAC address of connecting device.

The remote host is running HSQLDB, an open source database written in Java, and its database engine is listening on TCP port 9001 for network server database connections using JDBC.

The remote service accepts connections encrypted using SSL 2.0 and/or SSL 3.0. These versions of SSL are affected by several cryptographic flaws, including:

  - An insecure padding scheme with CBC ciphers.

  - Insecure session renegotiation and resumption schemes.

An attacker can exploit these flaws to conduct man-in-the-middle attacks or to decrypt communications between the affected service and clients.

Although SSL/TLS has a secure means for choosing the highest supported version of the protocol (so that these versions will be used only if the client or server support nothing better), many web browsers implement this in an unsafe way that allows an attacker to downgrade a connection (such as in POODLE). Therefore, it is recommended that these protocols be disabled entirely.

NIST has determined that SSL 3.0 is no longer acceptable for secure communications. As of the date of enforcement found in PCI DSS v3.1, any version of SSL will not meet the PCI SSC's definition of 'strong cryptography'.

The remote host is running Skype, a peer-to-peer Voice-Over-IP application.

Due to the peer-to-peer nature of Skype, any user connecting to the Skype network may consume a large amount of bandwidth. 

Make sure the use of this program is done in accordance with your corporate security policy.

The remote host is running Py2Play, a peer-to-peer network game engine. Make sure that this service has been installed in accordance with your security policy.

The remote host is running a Tofu server.  Tofu is a network gaming engine. Make sure this service has been installed in accordance to your security policy.

The remote host is running Ventrilo, a voice over IP (VoIP) software developed by Flagship Industries.

ID	Name	Severity
22363	RMI Remote Object Detection	info
22361	ColdFusion MX Server Detection	info
22319	MSRPC Service Detection	info
22318	HP OpenView BBC Service Detection	info
22270	Zend Session Clustering Daemon Detection	info
22269	Firebird / InterBase Database Server Detection	info
22228	Informix Detection	info
22227	RMI Registry Detection	info
22195	eIQnetworks Enterprise Security Analyzer Monitoring Agent Detection	info
22180	Hobbit Monitor Daemon Detection	info
22133	eIQnetworks Enterprise Security Analyzer Topology Server Detection	info
22128	eIQnetworks Enterprise Security Analyzer License Manager Detection	info
22126	eIQnetworks Enterprise Security Analyzer Syslog Server Detection (deprecated)	info
22073	Oracle Database Detection	info
21740	Trend Micro OfficeScan Client Version	info
21676	Rendezvous Daemon Detection	info
21245	GDB Server Detection	high
21242	Novell Messenger Messaging Agent Detection	info
21241	Novell Messenger Archive Agent Detection	info
21218	SynchronEyes Teacher Detection	info
21217	SynchronEyes Student Detection	info
21208	Skype Stack Version Detection	info
21186	AJP Connector Detection	info
20995	Retrospect Client Detection	info
20870	LDAP Server Detection	info
20834	Inter-Asterisk eXchange Protocol Detection	info
20813	TiVo Detection	info
20745	CA DMPrimer Service Detection	info
20734	CORBA IIOP Listener Detection	info
20727	Eudora Internet Mail Server Admin Server Detection	info
20377	Windows Server Update Services (WSUS) Detection	info
20345	Airport Administrative Traffic Detection (192/UDP)	medium
20340	Network Block Device Server Detection	info
20301	VMware ESX/GSX Server Authentication Daemon Detection	info
20285	HP Integrated Lights-Out (iLO) Detection	info
20181	VERITAS NetBackup Volume Manager Detection	info
20177	GO-Global Server Detection	info
20175	VERITAS Backup Agent Detection	info
20160	Cheops NG Agent Detection	info
20148	VERITAS NetBackup Agent Detection	info
20147	CA Message Queuing Service Detection	info
20109	Trend Micro OfficeScan Client Detection	info
20092	YIFF Sound Server Detection	info
20066	VLAN Membership Policy Server Detection	info
20065	HSQLDB Server Detection	info
20007	SSL Version 2 and 3 Protocol Detection	critical
19772	Skype Detection	info
19759	Py2Play Game Engine Detection	info
19758	Tofu Server Detection	info
19717	Ventrilo Server Detection	info

Detections

Analytics

Service detection Family for Nessus

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

high

info

info

info

info

info

info

info

info

info

info

info

info

info

info

medium

info

info

info

info

info

info

info

info

info

info

info

info

info

critical

info

info

info

info