The remote client is running RealNetworks RealPlayer.

The remote Toshiba is running the Toshiba auto-update client (Pinger.exe) that automatically connects to the Internet and downloads software from the Toshiba Software Upgrade FTP site.

The remote client is running a version of the Nullsoft Winamp media player that may be vulnerable to a remote code execution issue. This vulnerability may be used to remotely execute arbitrary code on the host by invoking an ActiveX component installed by Winamp in a malicious manner. 

The remote VPN concentrator is vulnerable to a flaw in its HTML parser processor. This vulnerability is documented as Cisco bug ID CSCdu15622.

The remote host is running a rsync server, a program to synchronize files and directories structure across a network. The version running on the host may be vulnerable to a path escaping issue. An attacker may be able to write and read files in the context of the server.

The remote host is running a version of Subversion which is older than 1.0.6. A flaw exists in the apache module mod_authz_svn in older versions. An attacker can access to any file in a given Subversion repository despite restrictions set by the administrator. 

A shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit.

The remote host is a Checkpoint Firewall version AI R54.

The remote host is a Checkpoint Firewall version NG with FP3.

The remote host is a Checkpoint Firewall version NG with FP2.

The remote host is a Checkpoint Firewall version NG with FP1.  There are known vulnerabilities with this version. 

The remote host is a Checkpoint Firewall version NG with no service packs.  There are known vulnerabilities within this version. 

The remote host is a Checkpoint Firewall version 4.1 SP2 - SP6.  There are known vulnerabilities within these versions. 

The remote host is a Checkpoint Firewall version 4.1 SP1.  The firewall is vulnerable to multiple remote buffer overflows, format string attacks, and other miscellaneous vulnerabilities. 

The remote host is a Checkpoint Firewall version 4.1 with no service packs.  The firewall is vulnerable to multiple remote buffer overflows, format string attacks, and other miscellaneous vulnerabilities. 

Improperly configured LDAP servers will allow the directory BASE to be set to NULL.  This allows information to be gathered without any prior knowledge of the directory structure.  Coupled with a NULL BIND, an anonymous user can query your LDAP server using a tool such as LdapMiner. 

The remote Citrix server is configured in such a way as to allow anonymous remote users to enumerate services. 

Winamp versions 2.91 and below suffer from a vulnerability which allows an attacker to overflow the client with a specially crafted MIDI file. Mass exploitation of this vulnerability would be relatively easy for an attacker with a streaming media server. 

The remote host is running a version of Speak Freely that is vulnerable to a Denial of Service attack that may be exploited by an attacker by sending a malformed GIF (using the "show your face feature") to the vulnerable host. 

The remote host is an LDAP server.  The LDAP server is configured to accept NULL 'bind' requests that will allow any user to connect to the server and query for information.

This machine is configured to offer Plug n Play services on the network.  It has been observed offering the following service :

The remote host is an LDAP server. The LDAP server is configured to accept NULL 'bind' requests which will allow any user to connect to the server and query for information.

Improperly configured LDAP servers will allow the directory BASE to be set to NULL. This allows information to be obtained without any prior knowledge of the directory structure.  Coupled with a NULL BIND, an anonymous user can query your LDAP server using a tool such as LdapMiner 

A shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells which pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit.

A Cisco shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

A shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

An AIX  shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

An Informix shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells which pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

A SCO shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

A RedHat Linux shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

A Windows shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

A SunOS shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

An unpassworded HP JetDirect shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

A HP JetDirect shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

An HP-UX shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

A Linux telnet shell server was noted on the host.  Typically, shells are used by remote users to manage operating systems.  Shells that pass traffic in plaintext introduce a risk to confidentiality and privacy.  In addition, many shells are used by malicious individuals as part of a Trojan program or remote buffer overflow exploit. 

The remote host is enabled and utilizing Microsoft Windows Update.  This service allows users to check for missing updates and initiate remediation via the Microsoft update site.  Depending on your individual policy, this may or may not be a desirable action.

A Citrix server is running on this machine. Citrix servers allow a Windows user to remotely obtain a graphical login (and therefore act as a local user on the remote host). If an attacker gains a valid login and password, he may be able to use this service to gain further access on the remote host. 

The server on this port is tunneling traffic through TLSv1.

The remote host is running a version of the NetBT name service which suffers from a memory disclosure problem.
An attacker may send a special packet to the remote NetBT name service, and the reply will contain random arbitrary data from the remote host memory. This arbitrary data may be a fragment from the web page the remote user is viewing, or something more serious like a cleartext password.
An attacker may use this flaw to continuously 'poll' the content of the memory of the remote host and might be able to obtain sensitive information.

The remote host is running a DHCP server. If it is ISC-DHCP, there might be several flaws in it that may allow an attacker to gain a root shell on this host.

A chargen server is running on this port on top of UDP. An attacker may use spoofed UDP packets to use this server to set up a 'ping pong' attack that would use this service to attack a third party host. 

A chargen server is running on this port.

ID	Name	Severity
2297	RealNetwork RealPlayer Version Detection	info
2296	Toshiba Software Auto-Update Detection	info
2258	Winamp ActiveX Control Remote Buffer Overflow	medium
2212	Cisco VPN Concentrator HTML Interface DoS (Bug ID CSCdu15622)	medium
1965	Rsync < 2.6.3 Sanitize_path Function Module Path Escaping	medium
1964	Subversion (SVN) < 1.0.6 Module File Restriction Bypass (deprecated)	medium
1963	Generic Shell Detection (Avaya Telnet)	info
1962	Checkpoint Firewall-1 Detection	info
1961	Checkpoint Firewall-1 Detection	info
1960	Checkpoint Firewall-1 Detection	medium
1959	Checkpoint Firewall-1 Detection	medium
1958	Checkpoint Firewall-1 Detection	medium
1957	Checkpoint Firewall-1 Detection	medium
1956	Checkpoint Firewall-1 Detection	high
1955	Checkpoint Firewall-1 Detection	high
1954	LDAP NULL Base Connection	medium
1953	Citrix MetaFrame Service Enumeration	medium
1952	Winamp MIDI Plugin Track Size Overflow	medium
1951	Speak Freely Malformed GIF Image Handling DoS	high
1949	LDAP Server NULL Bind Connection Information Disclosure	medium
1948	UPNP Traffic Detection	info
1947	LDAP Server NULL Bind Connection Information Disclosure	medium
1946	LDAP NULL Base Connection	medium
1945	Citrix MetaFrame Published Application Enumeration	medium
1944	Generic Shell Detection (MV/9600)	info
1943	Generic Shell Detection (Cisco Catalyst)	low
1942	Generic Shell Detection (MESA Telnet)	low
1941	Generic Shell Detection (Cisco Telnet port 23)	low
1940	Generic Shell Detection (AIX Telnet)	low
1939	Generic Shell Detection (Informix UniVerse Telnet)	low
1938	Generic Shell Detection (SCO Telnet)	low
1937	Generic Shell Detection (AXIS Telnet)	low
1936	Generic Shell Detection (RedHat Telnet)	low
1934	Generic Shell Detection (Sys V Telnet)	low
1933	Generic Shell Detection (Windows NT Telnet)	low
1932	Generic Shell Detection (SunOS)	low
1931	Generic Shell Detection (HP JetDirect)	high
1930	Generic Shell Detection (HP JetDirect)	low
1929	Generic Shell Detection (Cisco Telnet any port)	low
1928	Generic Shell Detection (HP-UX High Port)	low
1927	Generic Shell Detection (Linux Telnet)	low
1926	Generic Shell Detection (HP-UX Telnet)	low
1925	Windows Update Traffic Detection	info
1924	Citrix Server Detection	medium
1923	TLSv1 Negotiation Detection	info
1922	NetBIOS Name Service Reply Information Disclosure	medium
1907	DHCP Server Multiple Vulnerabilities (deprecated)	info
1906	DHCP Server Detection	info
1905	Chargen Server Detection (UDP)	medium
1904	Chargen Server Detection	info

Detections

Analytics

Generic Family for Nessus Network Monitor

info

info

medium

medium

medium

medium

info

info

info

medium

medium

medium

medium

high

high

medium

medium

medium

high

medium

info

medium

medium

medium

info

low

low

low

low

low

low

low

low

low

low

low

high

low

low

low

low

low

info

medium

info

medium

info

info

medium

info