Danware NetOp Host HELO Request Remote Information Disclosure

medium Nessus Plugin ID 15767

Synopsis

Nessus was able to read basic information about the remote host.

Description

This plugin displays the basic name and address information provided by NetOp products for easy network browsing. Administrators should disable displaying this information if they don't want it to be visible.

Note that leaked private IP addresses are only an issue if the NetOp product is listening on a public interface.

Solution

Refer to the vendor documentation for instructions to disable the information.

Plugin Details

Severity: Medium

ID: 15767

File Name: netop_infopublic.nasl

Version: 1.18

Type: remote

Family: Misc.

Published: 11/19/2004

Updated: 4/11/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

CPE: cpe:/a:danware_data:netop

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 11/19/2004

Reference Information

CVE: CVE-2004-0950

BID: 11710