A Nessus daemon is listening on the remote port.

The remote host is running MSSQL, a database server from Microsoft. It is possible to extract the version number of the remote installation from the server pre-login response.

It is possible to obtain the banner of the remote FTP server by connecting to a remote port.

Concurrent Versions System (CVS), an open source versioning system, is running on the remote port. The CVS server can be accessed either using third-party tools (e.g., RSH or SSH) or via the 'pserver' protocol, which is unencrypted.

The rexecd service is running on the remote host. This service is design to allow users of a network to execute commands remotely.
However, rexecd does not provide any good means of authentication, so it may be abused by an attacker to scan a third-party host.

The rlogin service is running on the remote host. This service is vulnerable since data is passed between the rlogin client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If the host is vulnerable to TCP sequence number guessing (from any network) or IP spoofing (including ARP hijacking on a local network) then it may be possible to bypass authentication.
Finally, rlogin is an easy way to turn file-write access into full logins through the .rhosts or rhosts.equiv files.

The Telnet service is running. This service is dangerous in the sense that it is not ciphered - that is, everyone can sniff the data that passes between the telnet client and the telnet server. This includes logins and passwords.

The rsh service is running on the remote host. This service is vulnerable since data is passed between the rsh client and server in cleartext. A man-in-the-middle attacker can exploit this to sniff logins and passwords. Also, it may allow poorly authenticated logins without passwords. If the host is vulnerable to TCP sequence number guessing (from any network) or IP spoofing (including ARP hijacking on a local network) then it may be possible to bypass authentication.
Finally, rsh is an easy way to turn file-write access into full logins through the .rhosts or rhosts.equiv files.

The remote host is running the 'echo' service. This service echoes any data which is sent to it.

This service is unused these days, so it is strongly advised that you disable it, as it may be used by attackers to set up denial of services attacks against this host.

The remote host is running a 'daytime' service.  This service is designed to give the local time of the day of this host to whoever connects to this port.  The date format issued by this service may sometimes help an attacker to guess the operating system type of this host, or to set up timed authentication attacks against the remote host. 

In addition, if the daytime service is running on a UDP port, an attacker may link it to the echo port of a third-party host using spoofing, thus creating a possible denial of service condition between this host and the third party.

The remote host is running an ident (also known as 'auth') daemon.

The 'ident' service provides sensitive information to potential attackers. It is designed to say which accounts are running which services. This helps attackers to focus on valuable services (those owned by root or other privileged accounts). If you do not use this service, and software you run does not require it, disable it.

ID	Name	Severity
10147	Nessus Server Detection	info
10144	Microsoft SQL Server TCP/IP Listener Detection	info
10092	FTP Server Detection	info
10051	CVS pserver Detection	info
10203	rexecd Service Detection	critical
10205	rlogin Service Detection	high
10280	Telnet Service Detection	info
10245	rsh Service Detection	high
10061	Echo Service Detection	medium
10052	Daytime Service Detection	info
10021	Identd Service Detection	info

Detections

Analytics

Service detection Family for Nessus

info

info

info

info

critical

high

info

high

medium

info

info