Test Kennung:	1.3.6.1.4.1.25623.1.0.900600
Kategorie:	FTP
Titel:	Anonymous FTP Login Reporting
Zusammenfassung:	Reports if the remote FTP Server allows anonymous logins.
Beschreibung:	Summary: Reports if the remote FTP Server allows anonymous logins. Vulnerability Insight: A host that provides an FTP service may additionally provide Anonymous FTP access as well. Under this arrangement, users do not strictly need an account on the host. Instead the user typically enters 'anonymous' or 'ftp' when prompted for username. Although users are commonly asked to send their email address as their password, little to no verification is actually performed on the supplied data. Remark: NIST don't see 'configuration issues' as software flaws so the referenced CVE has a severity of 0.0. The severity of this VT has been raised by Greenbone to still report a configuration issue on the target. Vulnerability Impact: Based on the files accessible via this anonymous FTP login and the permissions of this account an attacker might be able to: - gain access to sensitive files - upload or delete files. Solution: If you do not want to share files, you should disable anonymous logins. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0497 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0497
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.