mat15.mat.ufpb.br

Repartition of the level of the security problems :

List of open ports :

• netbios-ssn (139/tcp) (Security hole found)
• general/tcp (Security notes found)
• netbios-ns (137/udp) (Security warnings found)
• general/udp (Security notes found)
• general/icmp (Security warnings found)

Vulnerability found on port netbios-ssn (139/tcp)

. It was possible to log into the remote host using a NULL session.
The concept of a NULL session is to provide a null username and
a null password, which grants the user the 'guest' access


. All the smb tests will be done as ''/'whatever'

Warning found on port netbios-ssn (139/tcp)

Here is the list of the SMB shares of this host :

ADMIN$ -
IPC$ - Comunica‡Æo remota entre processos


This is potentially dangerous as this may help the attack
of a potential hacker.

Solution : filter incoming traffic to this port
Risk factor : Medium

Information found on port general/tcp

Nmap found that this host is running Windows NT4 / Win95 / Win98

Warning found on port netbios-ns (137/udp)

. The following 6 NetBIOS names have been gathered :
HELIO
DM
HELIO
HELIO
DM
JOAQUIM
. The remote host has the following MAC address on its adapter :
0x00 0x30 0x21 0x0b 0xd3 0xb7

If you do not want to allow everyone to find the NetBios name
of your computer, you should filter incoming traffic to this port.

Risk factor : Medium

Information found on port general/udp

For your information, here is the traceroute to 150.165.135.15 :
150.165.250.100
150.165.254.254
150.165.254.35
150.165.253.135
150.165.135.15

Warning found on port general/icmp

The remote host answers to an ICMP timestamp
request. This allows an attacker to know the
date which is set on your machine.

This may help him to defeat all your
time based authentifications protocols.

Solution : filter out the icmp timestamp
requests (13), and the outgoing icmp
timestamp replies (14).

Risk factor : Low
CVE : CAN-1999-0524

Warning found on port general/icmp

The remote host answered to an ICMP_MASKREQ
query and sent us its netmask.

An attacker can use this information to
understand how your network is set up
and how the routing is done. This may
help him to bypass your filters.

Solution : reconfigure the remote host so
that it does not answer to those requests.
Set up filters that deny ICMP packets of
type 17.

Risk factor : Low
CVE : CAN-1999-0524