150.165.135.2

Repartition of the level of the security problems :

List of open ports :

• ftp (21/tcp)
• auth (113/tcp) (Security warnings found)
• netbios-ssn (139/tcp)
• unknown (1352/tcp) (Security hole found)
• general/tcp (Security notes found)
• netbios-ns (137/udp) (Security warnings found)
• general/udp (Security notes found)
• general/icmp (Security warnings found)

Warning found on port auth (113/tcp)

The 'ident' service provides sensitives informations
to the intruders : it mainly says which accounts are running which
services. This helps attackers to focus on valuable services [those
owned by root]. If you don't use this service, disable it.

Risk factor : Low.

Solution : comment out the 'auth' line in /etc/inetd.conf
CVE : CAN-1999-0629

Vulnerability found on port unknown (1352/tcp)

You are running a version of SSH which is
older than version 1.2.32,
or a version of OpenSSH which is older than
2.3.0.

This version is vulnerable to a flaw which
allows an attacker to insert arbitrary commands
in a ssh stream.

Solution :
Upgrade to version 1.2.32 of SSH which solves this problem,
or to version 2.3.0 of OpenSSH

More information:
http://www.core-sdi.com/english/ssh/

Risk factor : High

Warning found on port unknown (1352/tcp)

a ssh server is running on this port

Warning found on port unknown (1352/tcp)

You are running a version of SSH which is
older than (or as old as) version 1.2.27.
If this version was compiled against the
RSAREF library, then it is very likely to
be vulnerable to a buffer overflow which
may be exploited by a cracker to gain
root on your system.

To determine if you compiled ssh against
the RSAREF library, type 'ssh -V' on the
remote host.

Risk factor : High
Solution : Use ssh 2.x, or do not compile ssh
against the RSAREF library
CVE : CVE-1999-0834

Warning found on port unknown (1352/tcp)

You are running a version of SSH which is
older than (or as old as) version 1.2.27.

If you compiled ssh with kerberos support,
then an attacker may eavesdrop your users
kerberos tickets, as sshd will set
the environment variable KRB5CCNAME to
'none', so kerberos tickets will be stored
in the current working directory of the
user, as 'none'.

If you have nfs/smb shared disks, then an attacker
may eavesdrop the kerberos tickets of your
users using this flaw.

** If you are not using kerberos, then
ignore this warning.

Risk factor : Serious
Solution : use ssh 1.2.28 or newer
CVE : CAN-2000-0575

Information found on port unknown (1352/tcp)

Remote SSH version : ssh-1.5-1.2.27

Information found on port general/tcp

Nmap found that this host is running Linux 2.1.122 - 2.2.16

Warning found on port netbios-ns (137/udp)

. The following 5 NetBIOS names have been gathered :
CHIANCA
CHIANCA
CHIANCA
DM
DM

. This SMB server seems to be a SAMBA server (this is not a security
risk, this is for your information). This can be told because this server
claims to have a null MAC address

If you do not want to allow everyone to find the NetBios name
of your computer, you should filter incoming traffic to this port.

Risk factor : Medium

Information found on port general/udp

For your information, here is the traceroute to 150.165.135.2 :
150.165.250.100
150.165.254.254
150.165.254.35
150.165.253.135
150.165.135.2

Warning found on port general/icmp

The remote host answers to an ICMP timestamp
request. This allows an attacker to know the
date which is set on your machine.

This may help him to defeat all your
time based authentifications protocols.

Solution : filter out the icmp timestamp
requests (13), and the outgoing icmp
timestamp replies (14).

Risk factor : Low
CVE : CAN-1999-0524