The remote web server is hosting .dmg files.  These are Mac executable files. 
The webmaster should make sure that they do not contain confidential data.

The remote client was running software on OS X that performed an insecure software update over HTTP.

The remote web server is hosting .war files.  .war files are compressed source code containers that contain all of the source code and resource files for a particular web application.  An attacker gaining access to this file can use any common decompression software and gain access to the source code and resource files.  This can lead to the loss of confidential data and possibly more sophisticated future attacks.  

The remote web server is hosting .ear files.  .ear files are compressed source code containers that contain all of the source code and resource files for a particular web application.  An attacker gaining access to this file can use any common decompression software and gain access to the source code and resource files.  This can lead to the loss of confidential data and possibly more sophisticated future attacks.  

The remote web server is hosting .pptx files.  These are Microsoft Office 2007 document files. 
The webmaster should make sure that they do not contain confidential data. 

The remote web server is hosting .xlsx files.  These are Microsoft Office 2007 document files. 
The webmaster should make sure that they do not contain confidential data. 

The remote web server is hosting .docx files.  These are Microsoft Office 2007 document files. 
The webmaster should make sure that they do not contain confidential data. 

The remote web server is hosting .ini files.  
The webmaster should make sure that they do not contain confidential data.

The remote web server is hosting and allowing the download of '.dll' files. 
The webmaster should make sure that they do not contain confidential data.

The remote web server was just observed passing a 'Set-Cookie' directive with what appears to be user ID or password information.  Examine the following cookie to ensure that confidential data is not being passed via a plain text cookie.

The remote web server is running a SOAP service that is enumerated via a '.disco' configuration file.  
Distributing such files over the web can be done, but the webmaster should make sure that they do not contain confidential data.  

The remote web server is running a SOAP service that is enumerated via a '.wsdl' configuration file. 
Distributing such files over the web can be done, but the webmaster should make sure that they do not contain confidential data.  

The remote web server is hosting .swf files. 
Distributing such files over the web can be done, but the webmaster should make sure that they do not contain confidential data.  Flash '.swf' files are easily decompiled into source code using tools such as Flare (www.nowrap.de/flare.html).

The remote web client posted a form with what appears to be an embedded user ID and password.  You should manually verify that confidential data is not being leaked from the network.

The remote web server sent a cookie with what appears to be an embedded Social Security Number.  You should manually verify that confidential data is not being leaked from the network. 

The remote web server is hosting .conf files.  
Distributing such files over the web can be done, but the webmaster should make sure that they do not contain confidential data.  '.conf' files are typically configuration files that may contain information regarding local applications and settings.

The remote web server is hosting .log files. 
Distributing such files over the web can be done, but the webmaster should make sure that they do not contain confidential data.  '.log' files are typically log files that may contain information regarding local applications and settings.

The remote web client sent a cookie with what appears to be an embedded Social Security Number.  You should manually verify that confidential data is not being leaked from the network.  

The remote web server is hosting .cnf files. 
Distributing such files over the web can be done, but the webmaster should make sure that they do not contain confidential data.  '.cnf' files are typically configuration files that may contain information regarding application version, physical path and more.

The remote web server is hosting .class files.  
Distributing such files over the web can be done, but the webmaster should make sure that they to not contain confidential data.  Java '.class' files are easily decompiled into source code using tools such as Jad (/www.kpdus.com/jad.html).  

The remote FTP client was observed uploading an archive (zipped) file that contained a .pdf file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .uni file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .ost file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .pst file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .divx file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .mpg file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .avi file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .wma file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .ogg file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .wav file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .mp3 or .mp4 file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .rtf file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .csv file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .ppt file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .doc file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP client was observed uploading an archive (zipped) file that contained a .xls file.  As an example, consider the indicated file that is a part of a .zip archive and was just uploaded to a remote FTP server.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that confidential files are not uploaded via FTP.

The remote FTP server is hosting compressed (zipped) archives that contain .pdf files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .uni files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information. However, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .ost files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .pst files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .divx files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .mpg files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .avi files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .wma files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .ogg files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .wav files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .mp3 or .mp4 files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .rtf files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

The remote FTP server is hosting compressed (zipped) archives that contain .csv files.  As an example, consider the indicated file that is a part of a .zip archive and was just downloaded by a remote FTP client.

Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential information.

ID	Name	Severity
4968	Mac .dmg File Detection	info
4967	OS X Insecure Software Update Transfer	info
4961	WebSphere '.war' File Detection	info
4960	WebSphere '.ear' File Detection	info
4949	Microsoft Office .pptx Files Detection	info
4948	Microsoft Office .xlsx Files Detection	info
4947	Microsoft Office .docx File Detection	info
4781	Web Server Allows Download of .ini Files	info
4711	'.dll' File Detection	info
4677	User Credentials Stored in Cookie	info
4676	SOAP '.disco' File Detection	info
4675	SOAP '.wsdl' File Detection	info
4674	Flash '.swf' File Detection	info
4673	Possible User ID and Password Sent Within a Web Form (GET)	info
4672	Possible User ID and Password Sent Within a Web Form (POST)	info
4671	Possible Social Security Number in Cookie	info
4665	'.conf' File Detection	info
4664	'.log' File Detection	info
4663	Possible Social Security Number in Cookie	info
4662	'.cnf' File Detection	info
4661	Java '.class' File Detection	info
4068	FTP Server Zipped .pdf File Uploaded	info
4067	FTP Server Zipped .uni File Uploaded	info
4066	FTP Server Zipped .ost File Uploaded	info
4065	FTP Server Zipped .pst File Uploaded	info
4064	FTP Server Zipped .divx File Uploaded	info
4063	FTP Server Zipped .mpg File Uploaded	info
4062	FTP Server Zipped .avi File Uploaded	info
4061	FTP Server Zipped .wma File Uploaded	info
4060	FTP Server Zipped .ogg File Uploaded	info
4059	FTP Server Zipped .wav File Uploaded	info
4058	FTP Server Zipped .mp3 / .mp4 File Uploaded	info
4057	FTP Server Zipped .rtf File Uploaded	info
4056	FTP Server Zipped .csv File Uploaded	info
4055	FTP Server Zipped .ppt File Uploaded	info
4054	FTP Server Zipped .doc File Uploaded	info
4053	FTP Server Zipped xls File Uploaded	info
4052	FTP Server Zipped .pdf File Detection	info
4051	FTP Server Zipped .uni File Detection	info
4050	FTP Server Zipped .ost File Detection	info
4049	FTP Server Zipped .pst File Detection	info
4048	FTP Server Zipped .divx File Detection	info
4047	FTP Server Zipped .mpg File Detection	info
4046	FTP Server Zipped .avi File Detection	info
4045	FTP Server Zipped .wma File Detection	info
4044	FTP Server Zipped .ogg File Detection	info
4043	FTP Server Zipped .wav File Detection	info
4042	FTP Server Zipped .mp3 / .mp4 File Detection	info
4041	FTP Server Zipped .rtf File Detection	info
4040	FTP Server Zipped .csv File Detection	info

Detections

Analytics

Data Leakage Family for Nessus Network Monitor

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info