The remote host is running the IPSEC Express 1.2.2 VPN Server.
A VPN (Virtual Private Network) allows remote users to connect to an internal network as if they were local users.  A VPN that allows split-tunneling will essentially serve as a bridge between the remote network and the internal network.  Special care should be taken to ensure that remote VPN clients connect securely and do not introduce an unacceptable level of risk to the internal computing environment. 

The remote host is running the IPSEC Express 1.2.1 VPN Server.
A VPN (Virtual Private Network) allows remote users to connect to an internal network as if they were local users.  A VPN that allows split-tunneling will essentially serve as a bridge between the remote network and the internal network.  Special care should be taken to ensure that remote VPN clients connect securely and do not introduce an unacceptable level of risk to the internal computing environment. 

The remote host is running the IPSEC Express 1.1.2 VPN Server.
A VPN (Virtual Private Network) allows remote users to connect to an internal network as if they were local users.  A VPN that allows split-tunneling will essentially serve as a bridge between the remote network and the internal network.  Special care should be taken to ensure that remote VPN clients connect securely and do not introduce an unacceptable level of risk to the internal computing environment. 

The remote host is running the IPSEC Express 1.1.1 VPN Server.
A VPN (Virtual Private Network) allows remote users to connect to an internal network as if they were local users.  A VPN that allows split-tunneling will essentially serve as a bridge between the remote network and the internal network.  Special care should be taken to ensure that remote VPN clients connect securely and do not introduce an unacceptable level of risk to the internal computing environment. 

The remote host is running the IPSEC Express 1.1.0 VPN Server.
A VPN (Virtual Private Network) allows remote users to connect to an internal network as if they were local users.  A VPN that allows split-tunneling will essentially serve as a bridge between the remote network and the internal network.  Special care should be taken to ensure that remote VPN clients connect securely and do not introduce an unacceptable level of risk to the internal computing environment. 

The remote host is using Winamp, a popular media player with support for playing MP3s, WAVs, and more.
 The installed version of Winamp suffers from a buffer overflow vulnerability when processing overly-long ID3v2 tags in an MP3 file.  An attacker may be able to exploit this flaw to execute arbitrary code on the remote host.

The remote host is running ZenWorks, a remote management interface from Novell.  

The remote host is running the razor-agent, a distributed client that connects to the razor spam detection and filtering network.  This version of Razor-agent is vulnerable to a remote Denial of Service (DoS) attack via a malformed query.  The details of the attack vectors are not currently known

The remote host is running the LeafNode NNTP server. The version of LeafNode that is installed is vulnerable to a remote Denial of Service (DoS) attack.  When an upstream NNTP server requests a header and then allows the connection to time out, the LeafNode NNTP server fails.  Successful exploitation would result in a loss of availability.

The remote host is running the SafeNet SoftRemote VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an internal network as if they were local users.  A VPN that allows split-tunneling will essentially serve as a bridge between the remote network and the internal network.  Special care should be taken to ensure that remote VPN clients connect securely and do not introduce an unacceptable level of risk to the internal computing environment. 

The remote host is running the OpenPGP VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment. 

The remote host is running the Netscreen VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment. 

The remote host is running the Microsoft Windows 2000 VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment. 

The remote host is running a KAME Racoon VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment. 

The remote host is running a generic Cisco VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment.

The remote host is running a SSH Sentinel 1.4 VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment.

The remote host is running a SSH Sentinel 1.4.1 VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment.

The remote host is running a SSH Sentinel 1.3 VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment.

The remote host is running a SSH Sentinel 1.2 VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment.

The remote host is running a SSH Sentinel 1.1 VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment.

The remote host is running a SSH Sentinel VPN Server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment.

The remote host is running a Cisco Unity VPN server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment.

The remote host is running a Cisco IOS VPN server.

A VPN (Virtual Private Network) allows remote users to connect to an
internal network as if they were local users.  A VPN that allows
split-tunneling will essentially serve as a bridge between the remote
network and the internal network.  Special care should be taken to
ensure that remote VPN clients connect securely and do not introduce
an unacceptable level of risk to the internal computing environment.

The remote host is running Groove, a virtual office workspace that allows remote users to collaborate via the Internet.  Groove uses centralized servers to keep remote workers synchronized with each other.  This version of Groove is vulnerable to multiple remote attacks.  The attacks stem from a lack of content parsing by the Groove product.  An attacker exploiting these flaws would need to be able to entice a Groove user into opening or viewing malicious files or data from within the Groove application.  Successful exploitation leads to the attacker being able to execute arbitrary code on the unsuspecting user.

The remote host is running Groove, a virtual office workspace that allows remote users to collaborate via the Internet.  Groove uses centralized servers to keep remote workers synchronized with each other.

The remote host is running Fortinet PPTP VPN.  

The remote server is acting as a VPN server.

The remote workstation is running as a VPN client. The workstation is connecting to a remote network via an encrypted VPN session.  Depending on the configuration of the VPN server on the remote network, the client may be routing traffic to/from an untrusted network.

The remote host is running a Checkpoint Firewall-1 VPN Server.

The remote host is running the Firewall-1 NG VPN Server.  The remote server is running Checkpoint patch level FP3.  Since the release of Firewall-1 NG FP3, there have been at least two (2) critical patches released by Checkpoint.  This version of Firewall-1 is vulnerable to a myriad of remote attacks that would give the attacker the ability to impact confidentiality, integrity, and availability of the remote system  

The remote host is running the Firewall-1 NG VPN Server.  The remote server is running Checkpoint patch level FP2.  Since the release of Firewall-1 NG FP2, there have been at least three (3) critical patches released by Checkpoint.  This version of Firewall-1 is vulnerable to a myriad of remote attacks that would give the attacker the ability to impact confidentiality, integrity, and availability of the remote system  

The remote host is running the Firewall-1 NG VPN Server.  The remote server is running Checkpoint patch level FP1.  Since the release of Firewall-1 NG FP1, there have been at least four (4) critical patches released by Checkpoint.  This version of Firewall-1 is vulnerable to a myriad of remote attacks that would give the attacker the ability to impact confidentiality, integrity, and availability of the remote system  

The remote host is running the Firewall-1 NG VPN Server.  The remote server is not running any Checkpoint patches.  Since the release of Firewall-1 NG, there have been at least five (5) critical patches released by Checkpoint.  This version of Firewall-1 is vulnerable to a myriad of remote attacks that would give the attacker the ability to impact confidentiality, integrity, and availability of the remote system  

The remote host is running the Firewall-1 NG VPN Server.  The remote server is running with version R55.  There has been at least one (1) critical patch released by Checkpoint since R55.  This version of Firewall-1 may be vulnerable to a myriad of remote attacks that would give the attacker the ability to impact confidentiality, integrity, and availability of the remote system.

The remote host is running the Firewall-1 NG VPN Server.  The remote server is running with version R54.  There have been at least two (2) critical patches released by Checkpoint since R54.  This version of Firewall-1 may be vulnerable to a myriad of remote attacks that would give the attacker the ability to impact confidentiality, integrity, and availability of the remote system.  

The remote host is running the Firewall-1 4.1 VPN Server.  The remote server is running with Service Pack 2 - 6. There have been at least four (4) critical patches released by Checkpoint since SP2.  This version of Firewall-1 may be vulnerable to a myriad of remote attacks that would give the attacker the ability to impact confidentiality, integrity, and availability of the remote system.  

The remote host is running the Firewall-1 4.1 VPN Server.  The remote server is running with Service Pack 1.  There have been at least five (5) critical patches released by Checkpoint since SP1.  This version of Firewall-1 is vulnerable to a myriad of remote attacks that would give the attacker the ability to impact confidentiality, integrity, and availability of the remote system.  

The remote host is running the Firewall-1 4.1 VPN Server.  The remote server is not running any Checkpoint patches.  Since the release of version 4.1, there have been at least six (6) critical patches released by Checkpoint.  This version of Firewall-1 is vulnerable to a myriad of remote attacks that would give the attacker the ability to impact confidentiality, integrity, and availability of the remote system  

The remote host is running Microsoft Media Player.  There is a flaw in this version of Media Player that would allow a remote attacker to cause an HTML pop-up window to appear when a specially formed media file was opened.  An attacker exploiting this flaw would need to be able to convince a user to download or browse to the malicious file. Successful exploitation would result in an HTML page opening on the remote system.  This flaw would typically be used in conjunction with social engineering or a browser exploit.  

The remote host is running Bakbone NetVault, an enterprise backup/restore application.  This version of NetVault is reported to be vulnerable to a remote heap overflow.  The details of the flaw are not currently known.  It is believed that a successful attack would lead to arbitrary code being executed.

The remote host is running the LeafNode NNTP server. The version of LeafNode is vulnerable to a remote Denial of Service (DoS) attack.  Specifically, when an upstream NNTP server requests a header and then abruptly terminates the connection, the LeafNode NNTP server fails.  Successful exploitation would result in a loss of availability.

The remote host is running ZoneAlarm, a personal firewall for the Windows platform.  The client is running a version of ZoneAlarm which is less than 5.5.094.000.  This version of ZoneAlarm is reported vulnerable to an undisclosed vulnerability and the vendor has released version 5.5.094.000 to remediate risk.  

The remote host is running a CVS server that, according to its version number, is vulnerable to an undisclosed remote buffer overflow.  An attacker exploiting this flaw is alleged to be able to execute arbitrary code on the target CVS server.

The remote host is running Xerox Document Centre, an administrative web-based GUI to a Xerox device.  This version is reportedly prone to several remote attacks which, if exploited, would lead to remote administrative access.  The details of the attack are not currently known.

The remote host is running Dameware, a utility that allows administrators remote access to the Windows Desktop via a number of different protocols.  There have been many flaws in Dameware and even one backdoor (Agobot) that uses Dameware as an attack vector for further propagation.

The remote host is running the CA eTRUST Intrusion Detection System (IDS). 

The server on this port is tunneling traffic through SSL version 3.

The server on this port is tunneling traffic through TLSv1.

The remote host is running Windows 2003 Server.  Multiple vulnerabilities were fixed in SP1.

The remote host is running Bakbone NetVault, an enterprise backup/restore application.  This version of NetVault is vulnerable to a remote heap overflow as well as a local content-parsing overflow.  An attacker exploiting the first flaw would need to be able to connect to the application on port 20031.  A successful exploit would result in arbitrary code being executed by the SYSTEM process.  An attacker exploiting the second flaw would need local read/write access to the Netvault configuration files.  A successful attack would lead to arbitrary code being executed.

ID	Name	Severity
3075	SSH IPSEC Express 1.2.2 VPN Detection	info
3074	SSH IPSEC Express 1.2.1 VPN Detection	info
3073	SSH IPSEC Express 1.1.2 VPN Detection	info
3072	SSH IPSEC Express 1.1.1 VPN Detection	info
3071	SSH IPSEC Express 1.1.0 VPN Detection	info
3069	Nullsoft Winamp < 5.093 Malformed ID3v2 Tag Overflow	high
3022	ZenWorks Detection	info
3020	Razor-agents < 2.72 Multiple DoS	medium
3011	Leafnode < 1.11.3 TCP Timeout DoS	medium
2952	SafeNet SoftRemote VPN Detection	info
2951	OpenPGP VPN Detection	info
2950	Netscreen VPN Detection	info
2949	Microsoft Windows 2000 VPN Detection	info
2948	KAME/racoon VPN Detection	info
2932	Cisco VPN Detection	info
2931	SSH Sentinel 1.4 VPN Detection	info
2930	SSH Sentinel 1.4.1 VPN Detection	info
2929	SSH Sentinel 1.3 VPN Detection	info
2928	SSH Sentinel 1.2 VPN Detection	info
2927	SSH Sentinel 1.1 VPN Detection	info
2926	SSH Sentinel VPN Detection	info
2925	Cisco Unity VPN Detection	info
2924	Cisco IOS VPN Detection	info
2923	Groove < 3.1.0 Build 2338 Multiple Vulnerabilities	critical
2922	Groove Detection	info
2916	Fortinet VPN Server Detection (over PPTP)	info
2915	VPN Server Detection (over PPTP)	info
2914	VPN Client Detection	medium
2913	Checkpoint Firewall-1 VPN Detection	info
2912	Checkpoint Firewall-1 NG Patch Level FP3 Detection	high
2911	Checkpoint Firewall-1 NG Patch Level FP2 Detection	high
2910	Checkpoint Firewall-1 NG Patch Level FP1 Detection	high
2909	Checkpoint Firewall-1 NG Patch Level 0 Detection	high
2908	Checkpoint Firewall-1 NG AI R55 Detection	medium
2907	Checkpoint Firewall-1 NG AI R54 Detection	high
2906	Checkpoint Firewall-1 Patch Level 2 through 6 Detection	high
2905	Checkpoint Firewall-1 Patch Level 1 Detection	high
2904	Checkpoint Firewall-1 Patch Level 0 Detection	high
2901	Microsoft Media Player Versions 9 and 10 Arbitrary HTML Pop-up (deprecated)	low
2895	Bakbone NetVault < 7.1.1 Unspecified Remote Overflow	critical
2880	Leafnode < 1.11.2 Abrupt Disconnect DoS	medium
2863	ZoneAlarm < 5.5.094.000 Undisclosed Vulnerability (deprecated)	medium
2838	CVS < 1.12.12 Unspecified Remote Overflow	medium
2836	Xerox Document Centre Multiple Remote Vulnerabilities	high
2829	DameWare Remote Desktop Listener	medium
2795	CA eTRUST IDS Detection	low
2792	SSLv3 Traffic Negotiation Detection	info
2791	TLSv1 Traffic Negotiation Detection	info
2786	Windows 2003 (No Service Pack) Multiple Vulnerabilities	critical
2784	Bakbone NetVault Multiple Vulnerabilities	critical

Detections

Analytics

Generic Family for Nessus Network Monitor

info

info

info

info

info

high

info

medium

medium

info

info

info

info

info

info

info

info

info

info

info

info

info

info

critical

info

info

info

medium

info

high

high

high

high

medium

high

high

high

high

low

critical

medium

medium

medium

high

medium

low

info

info

critical

critical