The remote host has just passed an encryption private key via plaintext on the network.  This is a risk in that private keys should only reside on a local system and if they must be passed, they should be encrypted in transit.  

The remote host has just passed a PuTTY SSH client encryption private key via plaintext on the network.  This is a risk in that private keys should only reside on a local system and if they must be passed, they should be encrypted in transit.  

The remote host appears to be running a Netopia router with SNMP enabled. The Netopia router is using the default SNMP community strings.  This version of the Netopia firmware is vulnerable to a flaw where a remote attacker can retrieve the administrative password by sending a specially formed SNMP query.  An attacker exploiting this flaw would only need to be able to send SNMP queries to the router using the default community string of 'public'.  Successful exploitation would result in the attacker gaining administrative credentials to the router. 

The remote MacOS X Client is reporting a MacOS application error via the network.

The remote host is an Apple Airport Wireless Access Point, which can be administrated on top of port 5009. There is a flaw in the administration protocol of this device which makes its password to be transmitted in cleartext over the network. An attacker could sniff this information, recover the password, and use it to gain administrative privileges on this host.

It seems that a Unix password file was sent by the remote web server.

The remote XML client posted a request with what appears to be an embedded userID and/or password.  You should manually verify that confidential data is not being leaked from the network.

The remote .NET application stores state information within a hidden form field.  Further, the information is not hashed.  Given this, an attacker can modify the ViewState string in transit and possibly alter the state or output of the .NET application. 

The remote FTP client just downloaded a file via FTP.

The remote FTP server is hosting the indicated file.

The remote FTP server is hosting .csv files. Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential data.

The remote FTP server is hosting .ppt files.  Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential data.

The remote FTP server is hosting .doc files.  Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential data.

The remote FTP server is hosting .xls files.  Distributing files over FTP is a common way of distributing information; however, efforts should be taken to ensure that the hosted files do not contain confidential data.

ID	Name	Severity
3780	Encryption Private Key Detection (RSA)	low
3778	Encryption Private Key Detection (Generic)	low
3777	Encryption Private Key Detection (PuTTY)	low
3776	Encryption Private Key Detection (PuTTY)	low
3775	Encryption Private Key Detection (Generic)	low
3774	Encryption Private Key Detection (Generic)	low
3747	Netopia SNMP Password Disclosure	medium
2368	MacOS X Application Crash Plaintext Report	medium
1886	Apple Airport Administrative Port Credential Encryption Weakness	high
1879	Password File Obtained by HTTP (GET)	low
5214	XML Request Possible userID / password Cleartext Remote Disclosure	info
5081	Microsoft .NET Hidden 'ViewState' Detection	info
5056	FTP Client File Download Detection	info
5055	FTP Server File Detection	info
4006	FTP Server .csv Office Files Detection	info
4005	FTP Server .ppt Office Files Detection	info
4004	FTP Server .doc Office Files Detection	info
4003	FTP Server .xls Office Files Detection	info

Detections

Analytics

Data Leakage Family for Nessus Network Monitor

low

low

low

low

low

low

medium

medium

high

low

info

info

info

info

info

info

info

info