Synopsis
Nessus was able to gain identity information from the remote LDAP server.
Description
By using the search base gathered by plugin ID 25701 and the supplied credentials, Nessus was able to enumerate domainDNS identity data from Active Directory.
Note: The Active Directory Identity scan template and associated plugins are intended to be used with smaller AD deployments for purposes of preliminary analysis. Accurate preliminary analysis can be expected for AD deployments with up to 5000 users, groups or machines and incomplete results will be returned for larger AD deployments with Nessus, Security Center and Vulnerability Management.
Plugin Details
File Name: ldap_enum_domaindns.nbin
Agent: windows
Supported Sensors: Nessus Agent, Nessus
Vulnerability Information
Required KB Items: SMB/login_filled/0, ldap_enum/available