Nessus Scan Report
This report gives details on hosts that were tested and issues that were found. Please follow the recommended steps and procedures to eradicate these threats.

Scan Details
Hosts which were alive and responding during test 1
Number of security holes found 1
Number of security warnings found 1


Host List
Host(s) Possible Issue
base-station.local Security hole(s) found
[ return to top ]


Analysis of Host
Address of Host Port/Service Issue regarding Port
base-station.local general/tcp Security notes found
base-station.local unknown (5009/tcp) Security warning(s) found
base-station.local general/udp Security notes found
base-station.local snmp (161/udp) Security hole found


Security Issues and Fixes: base-station.local
Type Port Issue and Fix
Informational general/tcp The remote host is up
Nessus ID : 10180
Informational general/tcp HTTP NIDS evasion functions are enabled.
You may get some false negative results
Nessus ID : 10890
Informational general/tcp 169.254.190.195 resolves as base-station.local.
Nessus ID : 12053
Informational general/tcp The remote host is running Apple Airport 3.84
Nessus ID : 11936
Warning unknown (5009/tcp)
The remote host is an Apple Airport Wireless Access Point which
can be administrated on top of TCP port 5009.

There is a design flaw in the administrative protocol which makes
the clients which connect to this port send the password
in plain text (although slightly obsfuscated).

An attacker who has the ability to sniff the data going to this
device may use this flaw to gain its administrative password and
gain its control. Since the airport base station does not keep any
log, it will be difficult to determine that administrative access
has been stolen.

Solution : Block incoming traffic to this port, and only administer
this base station when connected to it using a cross-over ethernet
cable.

Risk factor : Medium
CVE : CAN-2003-0270
BID : 7554
Nessus ID : 11620
Informational general/udp For your information, here is the traceroute to 169.254.190.195 :
169.254.190.196
169.254.190.195

Nessus ID : 10287
Vulnerability snmp (161/udp)
SNMP Agent responded as expected with community name: public
CVE : CAN-1999-0517, CAN-1999-0186, CAN-1999-0254, CAN-1999-0516
BID : 10576, 177, 2112, 6825, 7081, 7212, 7317, 9681
Other references : IAVA:2001-B-0001
Nessus ID : 10264
Informational snmp (161/udp) Using SNMP, we could determine that the remote operating system is :
Apple Base Station V3.84 Compatible
Nessus ID : 10800

This file was generated by Nessus, the open-sourced security scanner.