Pass MTA Open Mail Relaying Allowed CVE-1999-0512 CVE-2002-1278 CVE-2003-0285 22 Jun 1999 7.5 (v3) High Pass SMTP Server Detection 12 Oct 1999 None Pass Telnet Service Detection 22 Aug 1999 None Pass Microsoft Windows SMB Shares Access 09 May 2000 None Noise Traceroute Information 27 Nov 1999 None Noise Web Server robots.txt Information Disclosure 12 Oct 1999 None Pass VNC Software Detection 07 Mar 2000 None Noise Web Server No 404 Error Code Check 28 Apr 2000 None Pass Microsoft Windows SMB Log In Possible 09 May 2000 None Pass CVSweb Detection 10 May 2000 None Pass NFS Share Export List 07 Jun 2000 None Pass AFS Client Version Detection 14 Jun 2000 None Pass TCP Scanner 04 Feb 2009 None Pass Microsoft IIS Dangerous Sample Files Detection 15 Apr 2000 None Pass WFTPD Unauthenticated MLST Command DoS CVE-2000-0647 03 Aug 2000 7.5 (v3) High Pass PFTP Default Unpassworded Account 10 Sep 2000 9.8 (v3) Critical Pass LCDproc Detection 22 Apr 2000 None Pass Microsoft Windows LAN Manager SNMP LanMan Services Disclosure CVE-1999-0499 10 Nov 2000 None Pass SNMP Request Network Interfaces Enumeration 13 Nov 2000 None Pass HTTP Protocol Version Detection 28 Dec 2000 None Pass PPTP Detection 28 Feb 2001 None Pass cfingerd Version Detection 16 Apr 2001 None Pass Oracle Database tnslsnr Service Remote Version Disclosure 01 May 2001 None Pass Microsoft SQL Server UDP Query Remote Version Disclosure 25 May 2001 None Pass Check Point FireWall-1 Telnet Client Authentication Detection 26 May 2001 None Pass Check Point FireWall-1 HTTP Client Authentication Detection 26 May 2001 None Pass Microsoft Windows SMB NativeLanManager Remote System Information Disclosure 17 Oct 2001 None Pass ISC BIND 9.x AUTHORS Map Remote Version Disclosure 23 Aug 2001 None Pass VisualRoute Web Server Detection 29 Aug 2001 None Pass HP System Management Homepage Detection 29 Aug 2001 None Pass Webmin Detection 14 Sep 2001 None Pass VNC HTTP Server Detection 14 Sep 2001 None Pass COM+ Internet Services (CIS) Server Detection 14 Sep 2001 None Pass RTSP Server Type / Version Detection 14 Sep 2001 None Pass HTTP RPC Endpoint Mapper (http-rpc-epmap) Detection 14 Sep 2001 None Pass healthd Detection 23 Aug 2001 None Pass LaBrea Tarpitted Host Detection 06 Nov 2001 None Pass SNMP Query System Information Disclosure 06 Nov 2001 None Pass Symantec pcAnywhere Detection (TCP) 29 Oct 2001 None Pass Network Time Protocol (NTP) Server Detection 20 Mar 2015 None Pass Open Port Re-check 19 Mar 2002 None Pass Citrix Server Detection 20 Apr 2002 None Pass DNS Server Detection 13 Feb 2003 None Pass Sendmail RestrictQueueRun Option Debug Mode Information Disclosure CVE-2001-0715 18 Aug 2002 4 (v3) Medium Pass SNMP Request Cisco Router Information Disclosure 05 Jun 2002 None Pass RemotelyAnywhere WWW Detection 25 Mar 2002 None Pass Gnutella Servent Detection 30 Apr 2002 None Pass Windows Terminal Services Enabled 20 Apr 2002 None Pass Achievo class.atkdateattribute.js.php config_atkroot Parameter Remote File Inclusion CVE-2002-1435 22 Aug 2002 8.3 (v3) High Pass RPC Services Enumeration 24 Aug 2002 None Pass Web Server UDDI Detection 09 Oct 2002 None Pass Web Server Crafted Request Vendor/Version Information Disclosure 19 Feb 2003 None Pass HTTP Proxy Open gopher:// Request Relaying 02 Mar 2003 None Pass HP JetDirect Device SNMP Request Cleartext Admin Credential Disclosure CVE-2002-1048 04 Mar 2003 None Pass Sendmail < 8.7.6 Multiple Local Vulnerabilities CVE-1999-0131 11 Mar 2003 9.8 (v3) Critical Pass Discard Service Detection 12 Mar 2003 None Pass L2TP Network Server Detection 14 Mar 2003 None Pass rsync Service Detection 14 Mar 2003 None Pass Web Server Unconfigured - Default Install Page Present 20 Mar 2003 None Pass E-theni aff_liste_langue.php rep_include Parameter Remote File Inclusion CVE-2003-1256 28 Mar 2003 8.3 (v3) High Pass MantisBT Detection 27 May 2003 None Pass URLScan for IIS Detection 05 Jun 2003 None Pass zenTrack index.php Multiple Parameter Remote File Inclusion 06 Jun 2003 4.7 (v3) Medium Pass NETGEAR Router Default Password (password) for 'admin' Account 12 Jun 2003 9.8 (v3) Critical Pass Web Server Potentially Hosting Copyrighted Material 26 Jun 2003 None Pass ashNews 0.83 Multiple Vulnerabilities CVE-2006-0524 CVE-2003-1292 22 Jul 2003 7.5 (v3) High Pass Source Routed Packet Weakness 09 Sep 2003 None Pass StoneGate Firewall Client Authentication Detection 18 Jun 2003 None Pass BGP Service Detection 25 Oct 2003 None Pass Apache < 1.3.29 Multiple Modules Local Overflow CVE-2003-0542 01 Nov 2003 9.8 (v3) Critical Pass HMAP Web Server Fingerprinting 11 Nov 2003 None Pass Netscape Enterprise Server Default Files Present 25 Feb 2004 None Pass Avotus CDR mm Arbitrary File Retrieval 11 Dec 2003 None Pass Novonyx Web Server Multiple Sample Application Files Present CVE-2002-1634 07 Feb 2004 7.5 (v3) High Noise Host Fully Qualified Domain Name (FQDN) Resolution 11 Feb 2004 None Pass eMule Web Server Detection 07 May 2004 None Pass NETGEAR Wireless Access Point Hardcoded Default Password CVE-2004-2556 CVE-2004-2557 03 Jun 2004 7.5 (v3) High Pass Dell OpenManage Server Administrator Detection 01 Jul 2004 None Pass BasiliX Application Detection 09 Aug 2004 None Pass Direct Connect Hub Detection 25 Jul 2004 None Pass Netstat Portscanner (SSH) 15 Aug 2004 None Pass Arkoon Appliance Detection 26 Aug 2004 None Pass NetAsq IPS-Firewalls Detection 26 Aug 2004 None Pass Xedus Detection 03 Sep 2004 None Pass Xedus Webserver Connection Saturation DoS CVE-2004-1644 03 Sep 2004 7.5 (v3) High Pass Service Detection (2nd Pass) 17 Sep 2004 None Pass Microsoft Outlook Web Access (OWA) Version Detection 11 Aug 2004 None Pass Coppermine Photo Gallery Detection 21 Oct 2004 None Pass phpBB viewtopic.php highlight Parameter SQL Injection (ESMARKCONANT) CVE-2004-1315 22 Nov 2004 9.8 (v3) Critical Pass McAfee IntruShield Management Console Detection 03 Nov 2004 None Pass Hydra (NASL wrappers options) 01 Dec 2004 None Pass Help Center Live Multiple Remote Vulnerabilities (Cmd Exec, XSS) CVE-2004-2602 CVE-2004-2603 28 Dec 2004 8.3 (v3) High Pass Blue Coat ProxySG Console Management Detection 10 Feb 2005 None Pass NetOp Products Detection (TCP) 19 Nov 2004 None Pass NetOp Products Detection (UDP) 19 Nov 2004 None Pass Trend Micro IWSS Console Management Detection 23 Feb 2005 None Pass paFileDB Detection 15 Mar 2005 None Pass WebShield Appliance Detection 18 Mar 2005 None Pass Aventail ASAP Platform Management Console Detection 21 Mar 2005 None Pass Apache mod_suexec Multiple Privilege Escalation Vulnerabilities CVE-2007-1741 CVE-2007-1742 CVE-2007-1743 18 Nov 2011 7 (v3) High Pass CA ARCServe UniversalAgent Detection 13 Apr 2005 None Pass TCP Port 0 Open: Possible Backdoor 29 Apr 2005 None Pass CuteNews Detection 02 Mar 2005 None Pass Phorum Detection 17 Mar 2005 None Pass PhotoPost PHP Detection 30 Mar 2005 None Pass Kerio Personal Firewall Admin Service Detection 02 May 2005 None Pass Kerio Mailserver Admin Service Detection 02 May 2005 None Pass Kerio Winroute Firewall Admin Service Detection 02 May 2005 None Pass Woltlab Burning Board Detection 12 May 2005 None Pass Clearswift MIMEsweeper Manager Console Detection 10 May 2005 None Pass Service Detection (GET request) 06 Apr 2005 None Pass SMTP Server Connection Check 18 Jun 2005 None 80

RELAYTO Penetration Test Results - Page 80 RELAYTO Penetration Test Results Page 79 Page 81