The remote Debian host is missing a security-related update.

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6023 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6023-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff October 10, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : tiff CVE ID : CVE-2025-9900

It was discovered that missing input sanitising in the libtiff library could result in denial of service or potentially the execution of arbitrary code if malformed image files are processed.

For the oldstable distribution (bookworm), this problem has been fixed in version 4.5.0-6+deb12u3.

For the stable distribution (trixie), this problem has been fixed in version 4.7.0-3+deb13u1.

We recommend that you upgrade your tiff packages.

For the detailed security status of tiff please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/tiff

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade the libtiff-dev packages.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0005

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

Published: 2025/10/10, Modified: 2025/10/10

Remote package installed : libtiff6_4.7.0-3
Should be : libtiff6_4.7.0-3+deb13u1

The remote Debian host is missing one or more security-related updates.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6015 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6015-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso October 01, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : openssl CVE ID : CVE-2025-9230 CVE-2025-9231 CVE-2025-9232

Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service or information leaks.

Additional details can be found in the upstream advisory:
https://openssl-library.org/news/secadv/20250930.txt

For the oldstable distribution (bookworm), these problems have been fixed in version 3.0.17-1~deb12u3.

For the stable distribution (trixie), these problems have been fixed in version 3.5.1-1+deb13u1.

We recommend that you upgrade your openssl packages.

For the detailed security status of openssl please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/openssl

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade the libcrypto3-udeb packages.

High

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)

5.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0003

7.1 (CVSS2#AV:N/AC:H/Au:S/C:C/I:C/A:C)

5.3 (CVSS2#E:U/RL:OF/RC:C)

Published: 2025/10/01, Modified: 2025/10/01

Remote package installed : libssl3t64_3.5.1-1
Should be : libssl3t64_3.5.1-1+deb13u1
Remote package installed : openssl_3.5.1-1
Should be : openssl_3.5.1-1+deb13u1
Remote package installed : openssl-provider-legacy_3.5.1-1
Should be : openssl-provider-legacy_3.5.1-1+deb13u1

The remote Debian host is missing one or more security-related updates.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6033 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6033-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff October 23, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : bind9 CVE ID : CVE-2025-8677 CVE-2025-40778 CVE-2025-40780

Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in cache poisoning or denial of service.

For the oldstable distribution (bookworm), these problems have been fixed in version 1:9.18.41-1~deb12u1.

For the stable distribution (trixie), these problems have been fixed in version 1:9.20.15-1~deb13u1.

We recommend that you upgrade your bind9 packages.

For the detailed security status of bind9 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/bind9

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade the bind9 packages.

High

8.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)

7.5 (CVSS:3.0/E:U/RL:O/RC:C)

0.0003

7.8 (CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N)

5.8 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/10/24, Modified: 2025/10/24

Remote package installed : bind9-dnsutils_1:9.20.11-4
Should be : bind9-dnsutils_1:9.20.15-1~deb13u1
Remote package installed : bind9-host_1:9.20.11-4
Should be : bind9-host_1:9.20.15-1~deb13u1
Remote package installed : bind9-libs_1:9.20.11-4
Should be : bind9-libs_1:9.20.15-1~deb13u1

The remote Debian host is missing one or more security-related updates.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6076 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6076-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso December 10, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : libpng1.6 CVE ID : CVE-2025-64505 CVE-2025-64506 CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 Debian Bug : 1121216 1121217 1121218 1121219 1121877

Several vulnerabilities were reported in the libpng PNG library, which could lead to information leaks, denial of service or potentially the execution of arbitrary code if a specially crafted image is processed.

For the oldstable distribution (bookworm), these problems have been fixed in version 1.6.39-2+deb12u1.

For the stable distribution (trixie), these problems have been fixed in version 1.6.48-1+deb13u1.

We recommend that you upgrade your libpng1.6 packages.

For the detailed security status of libpng1.6 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/libpng1.6

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade the libpng-dev packages.

High

7.1 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)

6.4 (CVSS:3.0/E:P/RL:O/RC:C)

0.0004

8.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:C)

6.7 (CVSS2#E:POC/RL:OF/RC:C)

I

Published: 2025/12/10, Modified: 2025/12/12

Remote package installed : libpng16-16t64_1.6.48-1
Should be : libpng16-16t64_1.6.48-1+deb13u1

The remote Debian host is missing one or more security-related updates.

The remote Debian 12 / 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6030 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6030-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso October 22, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : intel-microcode CVE ID : CVE-2025-20053 CVE-2025-20109 CVE-2025-21090 CVE-2025-22839 CVE-2025-22840 CVE-2025-22889 CVE-2025-24305 CVE-2025-26403 CVE-2025-32086 Debian Bug : 1110983

This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security vulnerabilities which could result in privilege escalation or denial of service.

For the oldstable distribution (bookworm), these problems have been fixed in version 3.20250812.1~deb12u1.

For the stable distribution (trixie), these problems have been fixed in version 3.20250812.1~deb13u1.

We recommend that you upgrade your intel-microcode packages.

For the detailed security status of intel-microcode please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/intel-microcode

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade the intel-microcode packages.

Medium

7.3 (CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N)

7.9 (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N)

6.9 (CVSS:3.0/E:U/RL:O/RC:C)

0.0002

6.0 (CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C)

4.4 (CVSS2#E:U/RL:OF/RC:C)

Published: 2025/10/22, Modified: 2025/10/22

Remote package installed : intel-microcode_3.20250512.1
Should be : intel-microcode_3.20250812.1~deb13u1

The remote Debian host is missing a security-related update.

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6084 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6084-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso December 18, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : c-ares CVE ID : CVE-2025-62408

It was discovered that c-ares, a library that performs DNS requests and name resolution asynchronously, does not properly handle termination of queries which may result in denial of service.

For the stable distribution (trixie), this problem has been fixed in version 1.34.5-1+deb13u1.

We recommend that you upgrade your c-ares packages.

For the detailed security status of c-ares please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/c-ares

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade the libc-ares-dev packages.

Medium

5.9 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)

5.2 (CVSS:3.0/E:U/RL:O/RC:C)

0.0004

5.4 (CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:C)

4.0 (CVSS2#E:U/RL:OF/RC:C)

Published: 2025/12/18, Modified: 2025/12/18

Remote package installed : libcares2_1.34.5-1
Should be : libcares2_1.34.5-1+deb13u1

The remote Debian host is missing one or more security-related updates.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6088 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6088-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff December 21, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : php8.4 CVE ID : CVE-2025-14177 CVE-2025-14178 CVE-2025-14180

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service or memory disclosure.

For the stable distribution (trixie), these problems have been fixed in version 8.4.16-1~deb13u1.

We recommend that you upgrade your php8.4 packages.

For the detailed security status of php8.4 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/php8.4

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade the libapache2-mod-php8.4 packages.

Medium

7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

6.5 (CVSS:3.0/E:U/RL:O/RC:C)

0.0004

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

3.7 (CVSS2#E:U/RL:OF/RC:C)

Published: 2025/12/21, Modified: 2025/12/21

Remote package installed : libapache2-mod-php8.4_8.4.11-1
Should be : libapache2-mod-php8.4_8.4.16-1~deb13u1
Remote package installed : php8.4_8.4.11-1
Should be : php8.4_8.4.16-1~deb13u1
Remote package installed : php8.4-cli_8.4.11-1
Should be : php8.4-cli_8.4.16-1~deb13u1
Remote package installed : php8.4-common_8.4.11-1
Should be : php8.4-common_8.4.16-1~deb13u1
Remote package installed : php8.4-opcache_8.4.11-1
Should be : php8.4-opcache_8.4.16-1~deb13u1
Remote package installed : php8.4-readline_8.4.11-1
Should be : php8.4-readline_8.4.16-1~deb13u1

The remote Debian host is missing a security-related update.

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6094 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6094-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff January 05, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : libsodium CVE ID : CVE-2025-69277

It was discovered that the crypto_core_ed25519_is_valid_point() function of the Sodium cryptography library mishandled checks for valid elliptic curve points.

For the oldstable distribution (bookworm), this problem has been fixed in version 1.0.18-1+deb12u1.

For the stable distribution (trixie), this problem has been fixed in version 1.0.18-1+deb13u1.

We recommend that you upgrade your libsodium packages.

For the detailed security status of libsodium please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/libsodium

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade the libsodium-dev packages.

Low

4.5 (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N)

3.9 (CVSS:3.0/E:U/RL:O/RC:C)

0.0001

2.6 (CVSS2#AV:L/AC:H/Au:N/C:P/I:P/A:N)

1.9 (CVSS2#E:U/RL:OF/RC:C)

II

Published: 2026/01/05, Modified: 2026/01/09

Remote package installed : libsodium23_1.0.18-1+b2
Should be : libsodium23_1.0.18-1+deb13u1

The SSH server running on the remote host is affected by multiple vulnerabilities.

The version of OpenSSH installed on the remote host is prior to 10.1. It is, therefore, affected by multiple vulnerabilities:

- ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.) (CVE-2025-61984)

- ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used. (CVE-2025-61985)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade to OpenSSH version 10.1/10.1p1 or later.

Low

3.6 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)

0.0001

2.4 (CVSS2#AV:L/AC:H/Au:S/C:P/I:P/A:N)

II

Published: 2025/10/10, Modified: 2025/11/18

Version source : SSH-2.0-OpenSSH_10.0p2 Debian-7
Installed version : 10.0p2
Fixed version : 10.1 / 10.1.p1

The remote host has Apache HTTP Server software installed.

Apache HTTP Server is installed on the remote Linux host.

n/a

None

Published: 2020/10/12, Modified: 2026/01/07

Path : /usr/sbin/apache2
Version : 2.4.65
Associated Package : apache2-bin: /usr/sbin/apache2
Managed by OS : True
Running : yes

Configs found :
- /etc/apache2/apache2.conf

Loaded modules :
- libphp8.4
- mod_access_compat
- mod_alias
- mod_auth_basic
- mod_authn_core
- mod_authn_file
- mod_authz_core
- mod_authz_host
- mod_authz_user
- mod_autoindex
- mod_cgi
- mod_deflate
- mod_dir
- mod_env
- mod_filter
- mod_mime
- mod_mpm_prefork
- mod_negotiation
- mod_reqtimeout
- mod_setenvif
- mod_status

The remote host is hosting websites using Apache HTTP Server.

Domain names and IP addresses from Apache HTTP Server configuration file were retrieved from the remote host. Apache HTTP Server is a webserver environment written in C. Note: Only Linux- and Unix-based hosts are currently supported by this plugin.

n/a

None

Published: 2020/11/09, Modified: 2026/01/05

Sites and configs present in /usr/sbin/apache2 Apache installation:
- following sites are present in /etc/apache2/apache2.conf Apache config file:
+ () - *:80

Apache Log4j, a logging API, is installed on the remote Linux / Unix host.

One or more instances of Apache Log4j, a logging API, are installed on the remote Linux / Unix Host.

The plugin timeout can be set to a custom value other than the plugin's default of 45 minutes via the 'timeout.156000' scanner setting in Nessus 8.15.1 or later.

Note, this plugin runs certain commands differently if the scan is configured to use the 'Attempt Least Privilege' option. If enabled, scan times are expected to increase, especially on hosts with many files.

Please see https://docs.tenable.com/nessus/Content/SettingsAdvanced.htm#Custom for more information.

n/a

None

Published: 2021/12/10, Modified: 2026/01/07

Path : /usr/share/java/libintl-0.23.1.jar
Version : unknown
JMSAppender.class association : Not Found
JdbcAppender.class association : Not Found
JndiLookup.class association : Not Found
Method : Embedded string inspection


Note: Jar file inspection cannot be performed. No results or cannot list archive contents. If results are present, install an unzip package to resolve this problem.

BIOS info could be read.

Using SMBIOS and UEFI, it was possible to get BIOS info.

N/A

None

Published: 2008/09/08, Modified: 2024/02/12

Version : 1.2
Vendor : innotek GmbH
Release Date : 12/01/2006
Secure boot : disabled

It was possible to enumerate CPE names that matched on the remote system.

By using information obtained from a Nessus scan, this plugin reports CPE (Common Platform Enumeration) matches for various hardware and software products found on a host.

Note that if an official CPE is not available for the product, this plugin computes the best possible CPE based on the information available from the scan.

n/a

None

Published: 2010/04/21, Modified: 2026/01/05

The remote operating system matched the following CPE :

cpe:/o:debian:debian_linux:13 -> Debian Linux

Following application CPE's matched on the remote system :

cpe:/a:apache:http_server:2.4.65 -> Apache Software Foundation Apache HTTP Server
cpe:/a:apache:log4j -> Apache Software Foundation log4j
cpe:/a:gnupg:libgcrypt:1.11.0 -> GnuPG Libgcrypt
cpe:/a:haxx:curl:8.14.1 -> Haxx Curl
cpe:/a:haxx:libcurl:8.14.1 -> Haxx libcurl
cpe:/a:ibm:qradar:cat%3a_%2fetc%2f.qradar_install_version%3a_no_such_file_or_directory
cpe:/a:openbsd:openssh:10.0p2 -> OpenBSD OpenSSH
cpe:/a:openssl:openssl:3.5.1 -> OpenSSL Project OpenSSL
cpe:/a:php:php:8.4.11 -> PHP PHP
cpe:/a:tukaani:xz:5.8.1 -> Tukaani XZ
cpe:/a:vim:vim:9.1 -> Vim

Curl is installed on the remote Linux / Unix host.

Curl (also known as curl and cURL) is installed on the remote Linux / Unix host.

Additional information:

- More paths will be searched and the timeout for the search will be increased if 'Perform thorough tests' setting is enabled.

- The plugin timeout can be set to a custom value other than the plugin's default of 30 minutes via the 'timeout.182774' scanner setting in Nessus 8.15.1 or later.

Please see https://docs.tenable.com/nessus/Content/SettingsAdvanced.htm#Custom for more information.

n/a

None

Published: 2023/10/09, Modified: 2026/01/07

Path : /usr/bin/curl
Version : 8.14.1
Associated Package : curl 8.14.1-2
Managed by OS : True

It was possible to determine the remote system hostname.

This plugin reports a device's hostname collected via SSH or WMI.

n/a

None

Published: 2011/06/30, Modified: 2026/01/07

Hostname : L-CD
L-CD (hostname command)

It is possible to guess the remote device type.

Based on the remote operating system, it is possible to determine what the remote system type is (eg: a printer, router, general-purpose computer, etc).

n/a

None

Published: 2011/05/23, Modified: 2025/03/12

Remote device type : general-purpose
Confidence level : 100

Nessus was able to enumerate the IPv4 interfaces on the remote host.

Nessus was able to enumerate the network interfaces configured with IPv4 addresses by connecting to the remote host via SSH using the supplied credentials.

Disable any unused IPv4 interfaces.

None

Published: 2007/05/11, Modified: 2025/09/24

The following IPv4 addresses are set on the remote host :

- 127.0.0.1 (on interface lo)
- 10.0.2.15 (on interface enp0s3)
- 20.0.0.2 (on interface enp0s9)
- 192.168.2.1 (on interface enp0s10)

Nessus was able to enumerate the IPv6 interfaces on the remote host.

Nessus was able to enumerate the network interfaces configured with IPv6 addresses by connecting to the remote host via SSH using the supplied credentials.

Disable IPv6 if you are not actually using it. Otherwise, disable any unused IPv6 interfaces.

None

Published: 2007/05/11, Modified: 2025/09/24

The following IPv6 interfaces are set on the remote host :

- ::1 (on interface lo)
- fd17:625c:f037:2:afbf:4273:f1dc:9d26 (on interface enp0s3)
- fe80::3675:9a74:c357:ee97 (on interface enp0s3)
- fe80::a00:27ff:fefc:8edc (on interface enp0s9)
- fe80::a00:27ff:fe34:1015 (on interface enp0s10)

Nessus was able to enumerate MAC addresses on the remote host.

Nessus was able to enumerate MAC addresses by connecting to the remote host via SSH with the supplied credentials.

Disable any unused interfaces.

None

Published: 2008/06/30, Modified: 2022/12/20

The following MAC addresses exist on the remote host :

- 08:00:27:34:10:15 (interface enp0s10)
- 08:00:27:27:68:c3 (interface enp0s3)
- 08:00:27:fc:8e:dc (interface enp0s9)

Nessus was able to parse the Network Interface data on the remote host.

Nessus was able to parse the Network Interface data on the remote host.

n/a

None

Published: 2023/01/19, Modified: 2025/02/11

enp0s10:
MAC : 08:00:27:34:10:15
IPv4:
- Address : 192.168.2.1
Netmask : 255.255.255.0
Broadcast : 192.168.2.255
IPv6:
- Address : fe80::a00:27ff:fe34:1015
Prefixlen : 64
Scope : link
lo:
IPv4:
- Address : 127.0.0.1
Netmask : 255.0.0.0
IPv6:
- Address : ::1
Prefixlen : 128
Scope : host
enp0s9:
MAC : 08:00:27:fc:8e:dc
IPv4:
- Address : 20.0.0.2
Netmask : 255.255.255.252
Broadcast : 20.0.0.3
IPv6:
- Address : fe80::a00:27ff:fefc:8edc
Prefixlen : 64
Scope : link
enp0s3:
MAC : 08:00:27:27:68:c3
IPv4:
- Address : 10.0.2.15
Netmask : 255.255.255.0
Broadcast : 10.0.2.255
IPv6:
- Address : fd17:625c:f037:2:afbf:4273:f1dc:9d26
Prefixlen : 64
Scope : global
- Address : fe80::3675:9a74:c357:ee97
Prefixlen : 64
Scope : link

Nessus was able to retrieve network routing information from the remote host.

Nessus was able to retrieve network routing information the remote host.

n/a

None

Published: 2023/08/02, Modified: 2023/08/02

Gateway Routes:
enp0s3:
ipv4_gateways:
10.0.2.2:
subnets:
- 0.0.0.0/0
ipv6_gateways:
fe80::2:
subnets:
- ::/0
enp0s9:
ipv4_gateways:
20.0.0.1:
subnets:
- 192.168.1.0/24
Interface Routes:
enp0s10:
ipv4_subnets:
- 192.168.2.0/24
ipv6_subnets:
- fe80::/64
enp0s3:
ipv4_subnets:
- 10.0.2.0/24
ipv6_subnets:
- fd17:625c:f037:2::/64
- fe80::/64
enp0s9:
ipv4_subnets:
- 20.0.0.0/30
ipv6_subnets:
- fe80::/64

Enumerates the PATH variable of the current scan user.

Enumerates the PATH variables of the current scan user.

Ensure that directories listed here are in line with corporate policy.

None

Published: 2022/12/21, Modified: 2026/01/07

Nessus has enumerated the path of the current scan user :

/usr/local/sbin
/usr/local/bin
/usr/sbin
/usr/bin
/sbin
/bin

The manufacturer can be identified from the Ethernet OUI.

Each ethernet MAC address starts with a 24-bit Organizationally Unique Identifier (OUI). These OUIs are registered by IEEE.

n/a

None

Published: 2009/02/19, Modified: 2020/05/13

The following card manufacturers were identified :

08:00:27:34:10:15 : PCS Systemtechnik GmbH
08:00:27:27:68:C3 : PCS Systemtechnik GmbH
08:00:27:FC:8E:DC : PCS Systemtechnik GmbH

This plugin gathers MAC addresses from various sources and consolidates them into a list.

This plugin gathers MAC addresses discovered from both remote probing of the host (e.g. SNMP and Netbios) and from running local checks (e.g. ifconfig). It then consolidates the MAC addresses into a single, unique, and uniform list.

n/a

None

Published: 2015/10/16, Modified: 2025/06/10

The following is a consolidated list of detected MAC addresses:
- 08:00:27:34:10:15
- 08:00:27:27:68:C3
- 08:00:27:FC:8E:DC

IBM QRadar was detected on the remote host.

Version information for the IBM QRadar appliance was detected on the remote host.

n/a

None

Published: 2026/01/09, Modified: 2026/01/09

Path : /opt/qradar
Version : cat: /etc/.qradar_install_version: No such file or directory

Enumerates the IP address assignment method(static/dynamic).

Enumerates the IP address assignment method(static/dynamic).

n/a

None

Published: 2023/02/14, Modified: 2026/01/07

+ lo
+ IPv4
- Address : 127.0.0.1
Assign Method : static
+ IPv6
- Address : ::1
Assign Method : static
+ enp0s3
+ IPv4
- Address : 10.0.2.15
Assign Method : dynamic
+ IPv6
- Address : fd17:625c:f037:2:afbf:4273:f1dc:9d26
Assign Method : dynamic
- Address : fe80::3675:9a74:c357:ee97
Assign Method : static
+ enp0s9
+ IPv4
- Address : 20.0.0.2
Assign Method : static
+ IPv6
- Address : fe80::a00:27ff:fefc:8edc
Assign Method : static
+ enp0s10
+ IPv4
- Address : 192.168.2.1
Assign Method : static
+ IPv6
- Address : fe80::a00:27ff:fe34:1015
Assign Method : static

Libgcrypt is installed on this host.

Libgcrypt, a cryptography library, was found on the remote host.

n/a

None

Published: 2021/07/21, Modified: 2026/01/07

Nessus detected 4 installs of Libgcrypt:

Path : /usr/lib/x86_64-linux-gnu/libgcrypt.so.20
Version : 1.11.0

Path : /usr/lib/x86_64-linux-gnu/libgcrypt.so.20.5.0
Version : 1.11.0

Path : /lib/x86_64-linux-gnu/libgcrypt.so.20
Version : 1.11.0

Path : /lib/x86_64-linux-gnu/libgcrypt.so.20.5.0
Version : 1.11.0

Use system commands to obtain the list of mounted devices on the target machine at scan time.

Report the mounted devices information on the target machine at scan time using the following commands.
/bin/df -h /bin/lsblk /bin/mount -l

This plugin only reports on the tools available on the system and omits any tool that did not return information when the command was ran.

n/a

None

Published: 2022/02/03, Modified: 2023/11/27

$ df -h
Filesystem Size Used Avail Use% Mounted on
udev 960M 0 960M 0% /dev
tmpfs 198M 604K 197M 1% /run
/dev/sda1 19G 1.7G 16G 10% /
tmpfs 987M 0 987M 0% /dev/shm
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service
tmpfs 987M 0 987M 0% /tmp
tmpfs 1.0M 0 1.0M 0% /run/credentials/getty@tty1.service
tmpfs 198M 8.0K 198M 1% /run/user/1000


$ lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS
sda 8:0 0 20G 0 disk
|-sda1 8:1 0 18.9G 0 part /
|-sda2 8:2 0 1K 0 part
`-sda5 8:5 0 1.1G 0 part [SWAP]


$ mount -l
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
udev on /dev type devtmpfs (rw,nosuid,relatime,size=982920k,nr_inodes=245730,mode=755,inode64)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=600,ptmxmode=000)
tmpfs on /run type tmpfs (rw,nosuid,nodev,noexec,relatime,size=202104k,mode=755,inode64)
/dev/sda1 on / type ext4 (rw,relatime,errors=remount-ro)
securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,inode64)
cgroup2 on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,relatime,nsdelegate,memory_recursiveprot)
pstore on /sys/fs/pstore type pstore (rw,nosuid,nodev,noexec,relatime)
bpf on /sys/fs/bpf type bpf (rw,nosuid,nodev,noexec,relatime,mode=700)
systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=41,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=2950)
mqueue on /dev/mqueue type mqueue (rw,nosuid,nodev,noexec,relatime)
hugetlbfs on /dev/hugepages type hugetlbfs (rw,nosuid,nodev,relatime,pagesize=2M)
tmpfs on /run/lock type tmpfs (rw,nosuid,nodev,noexec,relatime,size=5120k,inode64)
debugfs on /sys/kernel/debug type debugfs (rw,nosuid,nodev,noexec,relatime)
tracefs on /sys/kernel/tracing type tracefs (rw,nosuid,nodev,noexec,relatime)
tmpfs on /run/credentials/systemd-journald.service type tmpfs (ro,nosuid,nodev,noexec,relatime,nosymfollow,size=1024k,nr_inodes=1024,mode=700,inode64,noswap)
configfs on /sys/kernel/config type configfs (rw,nosuid,nodev,noexec,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,nosuid,nodev,noexec,relatime)
tmpfs on /run/credentials/systemd-resolved.service type tmpfs (ro,nosuid,nodev,noexec,relatime,nosymfollow,size=1024k,nr_inodes=1024,mode=700,inode64,noswap)
tmpfs on /tmp type tmpfs (rw,nosuid,nodev,nr_inodes=1048576,inode64)
binfmt_misc on /proc/sys/fs/binfmt_misc type binfmt_misc (rw,nosuid,nodev,noexec,relatime)
tmpfs on /run/credentials/getty@tty1.service type tmpfs (ro,nosuid,nodev,noexec,relatime,nosymfollow,size=1024k,nr_inodes=1024,mode=700,inode64,noswap)
tmpfs on /run/user/1000 type tmpfs (rw,nosuid,nodev,relatime,size=202100k,nr_inodes=50525,mode=700,uid=1000,gid=1000,inode64)

Nessus was able to collect and report time zone information from the remote host.

Nessus was able to collect time zone information from the remote Linux host.

None

None

Published: 2024/04/10, Modified: 2024/04/10

Via date: GMT +0000
Via timedatectl: Time zone: Europe/London (GMT, +0000)
Via /etc/localtime: GMT0BST,M3.5.0/1,M10.5.0

Nessus was able to enumerate local users and groups on the remote Linux host.

Using the supplied credentials, Nessus was able to enumerate the local users and groups on the remote Linux host.

None

None

Published: 2016/12/19, Modified: 2025/03/26

-----------[ User Accounts ]-----------

User : londonlogin
Home folder : /home/londonlogin
Start script : /bin/bash
Groups : dip
netdev
users
video
londonlogin
cdrom
audio
sudo
plugdev
floppy

----------[ System Accounts ]----------

User : root
Home folder : /root
Start script : /bin/bash
Groups : root

User : daemon
Home folder : /usr/sbin
Start script : /usr/sbin/nologin
Groups : daemon

User : bin
Home folder : /bin
Start script : /usr/sbin/nologin
Groups : bin

User : sys
Home folder : /dev
Start script : /usr/sbin/nologin
Groups : sys

User : sync
Home folder : /bin
Start script : /bin/sync
Groups : nogroup

User : games
Home folder : /usr/games
Start script : /usr/sbin/nologin
Groups : games

User : man
Home folder : /var/cache/man
Start script : /usr/sbin/nologin
Groups : man

User : lp
Home folder : /var/spool/lpd
Start script : /usr/sbin/nologin
Groups : lp

User : mail
Home folder : /var/mail
Start script : /usr/sbin/nologin
Groups : mail

User : news
Home folder : /var/spool/news
Start script : /usr/sbin/nologin
Groups : news

User : uucp
Home folder : /var/spool/uucp
Start script : /usr/sbin/nologin
Groups : uucp

User : proxy
Home folder : /bin
Start script : /usr/sbin/nologin
Groups : proxy

User : www-data
Home folder : /var/www
Start script : /usr/sbin/nologin
Groups : www-data

User : backup
Home folder : /var/backups
Start script : /usr/sbin/nologin
Groups : backup

User : list
Home folder : /var/list
Start script : /usr/sbin/nologin
Groups : list

User : irc
Home folder : /run/ircd
Start script : /usr/sbin/nologin
Groups : irc

User : _apt
Home folder : /nonexistent
Start script : /usr/sbin/nologin
Groups : nogroup

User : nobody
Home folder : /nonexistent
Start script : /usr/sbin/nologin
Groups : nogroup

User : systemd-network
Home folder : /
Start script : /usr/sbin/nologin
Groups : systemd-network

User : dhcpcd
Home folder : /usr/lib/dhcpcd
Start script : /bin/false
Groups : nogroup

User : systemd-timesync
Home folder : /
Start script : /usr/sbin/nologin
Groups : systemd-timesync

User : messagebus
Home folder : /nonexistent
Start script : /usr/sbin/nologin
Groups : messagebus

User : sshd
Home folder : /run/sshd
Start script : /usr/sbin/nologin
Groups : nogroup

User : ftp
Home folder : /srv/ftp
Start script : /usr/sbin/nologin
Groups : ftp

User : sssd
Home folder : /var/lib/sss
Start script : /usr/sbin/nologin
Groups : sssd

User : polkitd
Home folder : /
Start script : /usr/sbin/nologin
Groups : polkitd

User : systemd-resolve
Home folder : /
Start script : /usr/sbin/nologin
Groups : systemd-resolve


----------[ Domain Accounts ]----------

It is possible to determine which TCP ports are open.

This plugin is a SYN 'half-open' port scanner. It shall be reasonably quick even against a firewalled target.

Note that SYN scans are less intrusive than TCP (full connect) scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded.

Protect your target with an IP filter.

None

Published: 2009/02/04, Modified: 2025/07/14

Port 22/tcp was found to be open

This plugin displays information about the Nessus scan.

This plugin displays, for each tested host, information about the scan itself :

- The version of the plugin set.
- The type of scanner (Nessus or Nessus Home).
- The version of the Nessus Engine.
- The port scanner(s) used.
- The port range scanned.
- The ping round trip time
- Whether credentialed or third-party patch management checks are possible.
- Whether the display of superseded patches is enabled
- The date of the scan.
- The duration of the scan.
- The number of hosts scanned in parallel.
- The number of checks done in parallel.

n/a

None

Published: 2005/08/26, Modified: 2025/10/29

Information about this scan :

Nessus version : 10.11.1
Nessus build : 20021
Plugin feed version : 202601100414
Scanner edition used : Nessus Home
Scanner OS : WINDOWS
Scanner distribution : win-x86-64
Scan type : Normal
Scan name : L-CD - Basic Scan
Scan policy used : Basic Network Scan
Scanner IP : 20.0.0.1
Port scanner(s) : nessus_syn_scanner
Port range : default
Ping RTT : 2.134 ms
Thorough tests : no
Experimental tests : no
Scan for Unpatched Vulnerabilities : no
Plugin debugging enabled : no
Paranoia level : 1
Report verbosity : 1
Safe checks : yes
Optimize the test : yes
Credentialed checks : yes, as 'londonlogin' via ssh
Attempt Least Privilege : no
Patch management checks : None
Display superseded patches : yes (supersedence plugin did not launch)
CGI scanning : disabled
Web application tests : disabled
Max hosts : 30
Max checks : 4
Recv timeout : 5
Backports : None
Allow post-scan editing : Yes
Nessus Plugin Signature Checking : Enabled
Audit File Signature Checking : Disabled
Scan Start Date : 2026/1/10 22:22 GMT Standard Time
Scan duration : 817 sec
Scan for malware : no

Multiple OS fingerprints were detected.

Using a combination of remote probes (TCP/IP, SMB, HTTP, NTP, SNMP, etc), it was possible to gather one or more fingerprints from the remote system. While the highest-confidence result was reported in plugin 11936, “OS Identification”, the complete set of fingerprints detected are reported here.

n/a

None

Published: 2025/02/26, Modified: 2025/03/03

Following OS Fingerprints were found

Remote operating system : Linux Kernel 6.x
Confidence level : 56
Method : MLSinFP
Type : unknown
Fingerprint : unknown

Remote operating system : Linux Kernel 6.12.48+deb13-amd64
Confidence level : 99
Method : uname
Type : general-purpose
Fingerprint : uname:Linux L-CD 6.12.48+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.48-1 (2025-09-20) x86_64 GNU/Linux


Remote operating system : ArubaOS-CX - R9
Cisco Catalyst 9200 Series Switches
Cisco Catalyst 9300 Series Switches
Cisco Catalyst IE9300 Rugged Series
Nutanix
Confidence level : 59
Method : SinFP
Type :
Fingerprint : SinFP:
P1:B10113:F0x12:W64240:O0204ffff:M1460:
P2:B10113:F0x12:W65160:O0204ffff0402080affffffff4445414401030307:M1460:
P3:B00000:F0x00:W0:O0:M0
P4:191601_7_p=22R

Remote operating system : Linux Kernel 6.12.48+deb13-amd64 on Debian 13.1
Confidence level : 100
Method : LinuxDistribution
Type : general-purpose
Fingerprint : unknown

Following fingerprints could not be used to determine OS :
SSH:!:SSH-2.0-OpenSSH_10.0p2 Debian-7

It is possible to guess the remote operating system.

Using a combination of remote probes (e.g., TCP/IP, SMB, HTTP, NTP, SNMP, etc.), it is possible to guess the name of the remote operating system in use. It is also possible sometimes to guess the version of the operating system.

n/a

None

Published: 2003/12/09, Modified: 2025/06/03

Remote operating system : Linux Kernel 6.12.48+deb13-amd64 on Debian 13.1
Confidence level : 100
Method : LinuxDistribution


The remote host is running Linux Kernel 6.12.48+deb13-amd64 on Debian 13.1

Information about the remote host can be disclosed via an authenticated session.

Nessus was able to login to the remote host using SSH or local commands and extract the list of installed packages.

n/a

None

Published: 2017/05/30, Modified: 2025/02/11

It was possible to log into the remote host via SSH using 'password' authentication.

The output of "uname -a" is :
Linux L-CD 6.12.48+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.48-1 (2025-09-20) x86_64 GNU/Linux

Local checks have been enabled for this host.
The remote Debian system is :
13.1

OS Security Patch Assessment is available for this host.
Runtime : 8.824089 seconds

Nessus was able to log in to the remote host using the provided credentials and enumerate OS security patch levels.

Nessus was able to determine OS security patch levels by logging into the remote host and running commands to determine the version of the operating system and its components. The remote host was identified as an operating system or device that Nessus supports for patch and update assessment. The necessary information was obtained to perform these checks.

n/a

None

Published: 2018/10/02, Modified: 2021/07/12

OS Security Patch Assessment is available.

Account : londonlogin
Protocol : SSH

An OpenSSH-based SSH server was detected on the remote host.

An OpenSSH-based SSH server was detected on the remote host.

n/a

None

Published: 2023/09/14, Modified: 2026/01/07

Service : ssh
Version : 10.0p2
Banner : SSH-2.0-OpenSSH_10.0p2 Debian-7

OpenSSL was detected on the remote Linux host.

OpenSSL was detected on the remote Linux host.

The plugin timeout can be set to a custom value other than the plugin's default of 15 minutes via the 'timeout.168007' scanner setting in Nessus 8.15.1 or later.

Please see https://docs.tenable.com/nessus/Content/SettingsAdvanced.htm#Custom for more information.

Note: This plugin leverages the '-maxdepth' find command option, which is a feature implemented by the GNU find binary. If the target does not support this option, such as HP-UX and AIX devices, users will need to enable 'thorough tests' in their scan policy to run the find command without using a '-maxdepth' argument.

n/a

None

Published: 2022/11/21, Modified: 2026/01/07

Nessus detected 2 installs of OpenSSL:

Path : /usr/lib/x86_64-linux-gnu/libcrypto.so.3
Version : 3.5.1
Associated Package : libssl3t64

Path : /usr/bin/openssl
Version : 3.5.1
Associated Package : openssl 3.5.1-1
Managed by OS : True

We are unable to retrieve version info from the following list of OpenSSL files. However, these installs may include their version within the filename or the filename of the Associated Package.

e.g. libssl.so.3 (OpenSSL 3.x), libssl.so.1.1 (OpenSSL 1.1.x)

/usr/lib/x86_64-linux-gnu/libssl.so.3

The PHP scripting language is installed on the remote Unix host.

The PHP scripting language is installed on the remote Unix host.

Note: Enabling the 'Perform thorough tests' setting will search the file system much more broadly.
Thorough test is required to get results on hosts running MacOS.

n/a

None

Published: 2024/06/13, Modified: 2026/01/07

Path : /usr/bin/php8.4
Version : 8.4.11
Associated Package : php8.4-cli: /usr/bin/php8.4
INI file : /etc/php/8.4/cli/php.ini
INI source : PHP binary grep
Managed by OS : True

Reports details about packages installed via package managers.

Reports details about packages installed via package managers

n/a

None

Published: 2023/08/01, Modified: 2025/05/07

Successfully retrieved and stored package data.

The remote host is missing several patches.

The remote host is missing one or more security patches. This plugin lists the newest version of each patch to install to make sure the remote host is up-to-date.

Note: Because the 'Show missing patches that have been superseded' setting in your scan policy depends on this plugin, it will always run and cannot be disabled.

Install the patches listed below.

None

Published: 2013/07/08, Modified: 2025/12/15

. You need to take the following 9 actions :


[ Debian dsa-6015 : libcrypto3-udeb - security update (266357) ]

+ Action to take : Upgrade the libcrypto3-udeb packages.

+Impact : Taking this action will resolve 3 different vulnerabilities (CVEs).



[ Debian dsa-6023 : libtiff-dev - security update (270002) ]

+ Action to take : Upgrade the libtiff-dev packages.


[ Debian dsa-6030 : intel-microcode - security update (271205) ]

+ Action to take : Upgrade the intel-microcode packages.

+Impact : Taking this action will resolve 9 different vulnerabilities (CVEs).



[ Debian dsa-6033 : bind9 - security update (271361) ]

+ Action to take : Upgrade the bind9 packages.

+Impact : Taking this action will resolve 3 different vulnerabilities (CVEs).



[ Debian dsa-6076 : libpng-dev - security update (278084) ]

+ Action to take : Upgrade the libpng-dev packages.

+Impact : Taking this action will resolve 5 different vulnerabilities (CVEs).



[ Debian dsa-6084 : libc-ares-dev - security update (279112) ]

+ Action to take : Upgrade the libc-ares-dev packages.


[ Debian dsa-6088 : libapache2-mod-php8.4 - security update (279493) ]

+ Action to take : Upgrade the libapache2-mod-php8.4 packages.

+Impact : Taking this action will resolve 3 different vulnerabilities (CVEs).



[ Debian dsa-6094 : libsodium-dev - security update (281783) ]

+ Action to take : Upgrade the libsodium-dev packages.


[ OpenSSH < 10.1 / 10.1p1 Multiple Vulnerabilities (269984) ]

+ Action to take : Upgrade to OpenSSH version 10.1/10.1p1 or later.

+Impact : Taking this action will resolve 2 different vulnerabilities (CVEs).

Reports remote services that do not offer post-quantum ciphers.

This plugin reports network services that do not offer post-quantum ciphers. Tenable makes no attempt to determine whether the remote service would be vulnerable to a post-quantum attack.

However, cryptography that depends on the classic difficulty of solving the discrete logarithm problem or on the classic difficulty of large prime factorization is broken by Shor's algorithm. Examples of this are RSA asymmetric encryption and Diffie-Hellman key exchange.

n/a

None

Published: 2025/12/08, Modified: 2025/12/08

The target SSH server offers no post-quantum ciphers.

An SSH server is listening on this port.

This script detects which algorithms and languages are supported by the remote service for encrypting communications.

n/a

None

Published: 2013/10/28, Modified: 2025/12/08

Nessus negotiated the following encryption algorithm(s) with the server :

Client to Server: aes256-ctr
Server to Client: aes256-ctr

The server supports the following options for compression_algorithms_server_to_client :

none
zlib@openssh.com

The server supports the following options for mac_algorithms_client_to_server :

hmac-sha1
hmac-sha1-etm@openssh.com
hmac-sha2-256
hmac-sha2-256-etm@openssh.com
hmac-sha2-512
hmac-sha2-512-etm@openssh.com
umac-128-etm@openssh.com
umac-128@openssh.com
umac-64-etm@openssh.com
umac-64@openssh.com

The server supports the following options for server_host_key_algorithms :

ecdsa-sha2-nistp256
rsa-sha2-256
rsa-sha2-512
ssh-ed25519

The server supports the following options for encryption_algorithms_client_to_server :

aes128-ctr
aes128-gcm@openssh.com
aes192-ctr
aes256-ctr
aes256-gcm@openssh.com
chacha20-poly1305@openssh.com

The server supports the following options for mac_algorithms_server_to_client :

hmac-sha1
hmac-sha1-etm@openssh.com
hmac-sha2-256
hmac-sha2-256-etm@openssh.com
hmac-sha2-512
hmac-sha2-512-etm@openssh.com
umac-128-etm@openssh.com
umac-128@openssh.com
umac-64-etm@openssh.com
umac-64@openssh.com

The server supports the following options for kex_algorithms :

curve25519-sha256
curve25519-sha256@libssh.org
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
ext-info-s
kex-strict-s-v00@openssh.com
mlkem768x25519-sha256
sntrup761x25519-sha512
sntrup761x25519-sha512@openssh.com

The server supports the following options for compression_algorithms_client_to_server :

none
zlib@openssh.com

The server supports the following options for encryption_algorithms_server_to_client :

aes128-ctr
aes128-gcm@openssh.com
aes192-ctr
aes256-ctr
aes256-gcm@openssh.com
chacha20-poly1305@openssh.com

This plugin reports the SSH commands that failed with a response indicating that privilege escalation is required to run them.

This plugin reports the SSH commands that failed with a response indicating that privilege escalation is required to run them. Either privilege escalation credentials were not provided, or the command failed to run with the provided privilege escalation credentials.

NOTE: Due to limitations inherent to the majority of SSH servers, this plugin may falsely report failures for commands containing error output expected by sudo, such as 'incorrect password', 'not in the sudoers file', or 'not allowed to execute'.

n/a

None

Published: 2017/08/01, Modified: 2020/09/22

Login account : londonlogin
Commands failed due to privilege escalation failure:
- Escalation account : londonlogin
Escalation method : sudo
Plugins :
- Plugin Filename : bios_get_info_ssh.nasl
Plugin ID : 34098
Plugin Name : BIOS Info (SSH)
- Command : "LC_ALL=C dmidecode"
Response : "# dmidecode 3.6\n/sys/firmware/dmi/tables/smbios_entry_point: Permission denied\nScanning /dev/mem for entry point.\nCan't read memory from /dev/mem"
Error : ""
- Command : "LC_ALL=C /usr/sbin/dmidecode"
Response : "# dmidecode 3.6\n/sys/firmware/dmi/tables/smbios_entry_point: Permission denied\nScanning /dev/mem for entry point.\nCan't read memory from /dev/mem"
Error : ""
- Command : "LC_ALL=C /sbin/dmidecode"
Response : "# dmidecode 3.6\n/sys/firmware/dmi/tables/smbios_entry_point: Permission denied\nScanning /dev/mem for entry point.\nCan't read memory from /dev/mem"
Error : ""
- Plugin Filename : enumerate_aws_ami_nix.nasl
Plugin ID : 90191
Plugin Name : Amazon Web Services EC2 Instance Metadata Enumeration (Unix)
- Command : "/usr/sbin/dmidecode -s system-version 2>&1"
Response : "/sys/firmware/dmi/tables/smbios_entry_point: Permission denied\nCan't read memory from /dev/mem"
Error : ""
- Plugin Filename : enumerate_oci_nix.nasl
Plugin ID : 154138
Plugin Name : Oracle Cloud Infrastructure Instance Metadata Enumeration (Linux / Unix)
- Command : "LC_ALL=C dmidecode -s chassis-asset-tag 2>&1"
Response : "/sys/firmware/dmi/tables/smbios_entry_point: Permission denied\nCan't read memory from /dev/mem"
Error : ""
- Command : "LC_ALL=C /usr/sbin/dmidecode -s chassis-asset-tag 2>&1"
Response : "/sys/firmware/dmi/tables/smbios_entry_point: Permission denied\nCan't read memory from /dev/mem"
Error : ""
- Command : "LC_ALL=C /sbin/dmidecode -s chassis-asset-tag 2>&1"
Response : "/sys/firmware/dmi/tables/smbios_entry_point: Permission denied\nCan't read memory from /dev/mem"
Error : ""
- Plugin Filename : linux_kernel_speculative_execution_detect.nbin
Plugin ID : 125216
Plugin Name : Processor Speculative Execution Vulnerabilities (Linux)
- Command : "head /sys/kernel/debug/x86/pti_enabled"
Response : "head: cannot open '/sys/kernel/debug/x86/pti_enabled' for reading: Permission denied"
Error : ""
- Command : "head /sys/kernel/debug/x86/retp_enabled"
Response : "head: cannot open '/sys/kernel/debug/x86/retp_enabled' for reading: Permission denied"
Error : ""
- Command : "head /sys/kernel/debug/x86/ibrs_enabled"
Response : "head: cannot open '/sys/kernel/debug/x86/ibrs_enabled' for reading: Permission denied"
Error : ""
- Plugin Filename : localusers_pwexpiry.nasl
Plugin ID : 83303
Plugin Name : Unix / Linux - Local Users Information : Passwords Never Expire
- Command : "cat /etc/shadow"
Response : "cat: /etc/shadow: Permission denied"
Error : ""

The SSH server on the remote host accepts password authentication.

The SSH server on the remote host accepts password authentication.

n/a

None

Published: 2021/05/07, Modified: 2021/05/07

A SSH server is running on the remote host.

This plugin determines the versions of the SSH protocol supported by the remote SSH daemon.

n/a

None

Published: 2002/03/06, Modified: 2024/07/24

The remote SSH daemon supports the following versions of the
SSH protocol :

- 1.99
- 2.0

The remote host supports the SCP protocol over SSH.

The remote host supports the Secure Copy (SCP) protocol over SSH.

n/a

None

Published: 2016/04/26, Modified: 2024/07/24

The remote SSH server is configured to enable SHA-1 HMAC algorithms.

The remote SSH server is configured to enable SHA-1 HMAC algorithms.

Although NIST has formally deprecated use of SHA-1 for digital signatures, SHA-1 is still considered secure for HMAC as the security of HMAC does not rely on the underlying hash function being resistant to collisions.

Note that this plugin only checks for the options of the remote SSH server.

n/a

None

Published: 2021/09/23, Modified: 2022/04/05

The following client-to-server SHA-1 Hash-based Message Authentication Code (HMAC) algorithms are supported :

hmac-sha1

The following server-to-client SHA-1 Hash-based Message Authentication Code (HMAC) algorithms are supported :

hmac-sha1

An SSH server is listening on this port.

It is possible to obtain information about the remote SSH server by sending an empty authentication request.

n/a

None

Published: 1999/10/12, Modified: 2024/07/24

SSH version : SSH-2.0-OpenSSH_10.0p2 Debian-7
SSH supported authentication : publickey,password

It was possible to enumerate installed software on the remote host via SSH.

Nessus was able to list the software installed on the remote host by calling the appropriate command (e.g., 'rpm -qa' on RPM-based Linux distributions, qpkg, dpkg, etc.).

Remove any software that is not in compliance with your organization's acceptable use and security policies.

None

Published: 2006/10/15, Modified: 2025/03/26

Here is the list of packages installed on the remote Debian Linux system :

ii adcli 0.9.2-1+b1 amd64 Tool for performing actions on an Active Directory domain
ii adduser 3.152 all add and remove users and groups
ii analog 2:6.0.17-3 amd64 web server log analyzer
ii apache2 2.4.65-2 amd64 Apache HTTP Server
ii apache2-bin 2.4.65-2 amd64 Apache HTTP Server (modules and other binary files)
ii apache2-data 2.4.65-2 all Apache HTTP Server (common files)
ii apache2-doc 2.4.65-2 all Apache HTTP Server (on-site documentation)
ii apache2-utils 2.4.65-2 amd64 Apache HTTP Server (utility programs for web servers)
ii apparmor 4.1.0-1 amd64 user-space parser utility for AppArmor
ii apt 3.0.3 amd64 commandline package manager
ii apt-listchanges 4.8 all package change history notification tool
ii apt-utils 3.0.3 amd64 package management related utility programs
ii base-files 13.8+deb13u1 amd64 Debian base system miscellaneous files
ii base-passwd 3.6.7 amd64 Debian base system master password and group files
ii bash 5.2.37-2+b5 amd64 GNU Bourne Again SHell
ii bash-completion 1:2.16.0-7 all programmable completion for the bash shell
ii bind9-dnsutils 1:9.20.11-4 amd64 Clients provided with BIND 9
ii bind9-host 1:9.20.11-4 amd64 DNS Lookup Utility
ii bind9-libs 1:9.20.11-4 amd64 Shared Libraries used by BIND 9
ii bsdextrautils 2.41-5 amd64 extra utilities from 4.4BSD-Lite
ii bsdutils 1:2.41-5 amd64 basic utilities from 4.4BSD-Lite
ii busybox 1:1.37.0-6+b3 amd64 Tiny utilities for small and embedded systems
ii bzip2 1.0.8-6 amd64 high-quality block-sorting file compressor - utilities
ii ca-certificates 20250419 all Common CA certificates
ii console-setup 1.240 all console font and keymap setup program
ii console-setup-linux 1.240 all Linux specific part of console-setup
ii coreutils 9.7-3 amd64 GNU core utilities
ii cpio 2.15+dfsg-2 amd64 GNU cpio -- a program to manage archives of files
ii cracklib-runtime 2.9.6-5.2+b1 amd64 runtime support for password checker library cracklib2
ii cron 3.0pl1-197 amd64 process scheduling daemon
ii cron-daemon-common 3.0pl1-197 all process scheduling daemon's configuration files
ii curl 8.14.1-2 amd64 command line tool for transferring data with URL syntax
ii dash 0.5.12-12 amd64 POSIX-compliant shell
ii dbus 1.16.2-2 amd64 simple interprocess messaging system (system message bus)
ii dbus-bin 1.16.2-2 amd64 simple interprocess messaging system (command line utilities)
ii dbus-daemon 1.16.2-2 amd64 simple interprocess messaging system (reference message bus)
ii dbus-session-bus-common 1.16.2-2 all simple interprocess messaging system (session bus configuration)
ii dbus-system-bus-common 1.16.2-2 all simple interprocess messaging system (system bus configuration)
ii dbus-user-session 1.16.2-2 amd64 simple interprocess messaging system (systemd --user integration)
ii debconf 1.5.91 all Debian configuration management system
ii debconf-i18n 1.5.91 all full internationalization support for debconf
ii debian-archive-keyring 2025.1 all OpenPGP archive certificates of the Debian archive
ii debian-faq 12.2 all Debian Frequently Asked Questions
ii debianutils 5.23.2 amd64 Miscellaneous utilities specific to Debian
ii dhcpcd-base 1:10.1.0-11 amd64 DHCPv4 and DHCPv6 dual-stack client (binaries and exit hooks)
ii dictionaries-common 1.30.10 all spelling dictionaries - common utilities
ii diffutils 1:3.10-4 amd64 File comparison utilities
ii distro-info-data 0.66 all information about the distributions' releases (data files)
ii dmidecode 3.6-2 amd64 SMBIOS/DMI table decoder
ii dmsetup 2:1.02.205-2 amd64 Linux Kernel Device Mapper userspace library
ii doc-debian 11.3+nmu1 all Debian Project documentation and other documents
ii dpkg 1.22.21 amd64 Debian package management system
ii dracut-install 106-6 amd64 dracut is an event driven initramfs infrastructure (dracut-install)
ii e2fsprogs 1.47.2-3+b3 amd64 ext2/ext3/ext4 file system utilities
ii eject 2.41-5 amd64 ejects CDs and operates CD-Changers under Linux
ii emacsen-common 3.0.8 all Common facilities for all emacsen
ii fdisk 2.41-5 amd64 collection of partitioning utilities
ii file 1:5.46-5 amd64 Recognize the type of data in a file using "magic" numbers
ii findutils 4.10.0-3 amd64 utilities for finding files--find, xargs
ii fontconfig-config 2.15.0-2.3 amd64 generic font configuration library - configuration
ii fonts-dejavu-core 2.37-8 all Vera font family derivate with additional characters
ii fonts-dejavu-mono 2.37-8 all Vera font family derivate with additional characters
ii ftp 20230507-2 all dummy transitional package for tnftp
ii gcc-14-base 14.2.0-19 amd64 GCC, the GNU Compiler Collection (base package)
ii gettext-base 0.23.1-2 amd64 GNU Internationalization utilities for the base system
ii grep 3.11-4 amd64 GNU grep, egrep and fgrep
ii groff-base 1.23.0-9 amd64 GNU troff text-formatting system (base system components)
ii grub-common 2.12-9 amd64 GRand Unified Bootloader (common files)
ii grub-pc 2.12-9 amd64 GRand Unified Bootloader, version 2 (PC/BIOS version)
ii grub-pc-bin 2.12-9 amd64 GRand Unified Bootloader, version 2 (PC/BIOS modules)
ii grub2-common 2.12-9 amd64 GRand Unified Bootloader (common files for version 2)
ii gzip 1.13-1 amd64 GNU compression utilities
ii hostname 3.25 amd64 utility to set/show the host name or domain name
ii iamerican 3.4.06-1 all American English dictionary for ispell (standard version)
ii ibritish 3.4.06-1 all British English dictionary for ispell (standard version)
ii ienglish-common 3.4.06-1 all Common files for British and American ispell dictionaries
ii ifupdown 0.8.44 amd64 high level tools to configure network interfaces
ii inetutils-telnet 2:2.6-3 amd64 telnet client
ii init 1.69~deb13u1 amd64 metapackage ensuring an init system is installed
ii init-system-helpers 1.69~deb13u1 all helper tools for all init systems
ii initramfs-tools 0.148.3 all generic modular initramfs generator (automation)
ii initramfs-tools-bin 0.148.3 amd64 generic modular initramfs generator (binary tools)
ii initramfs-tools-core 0.148.3 all generic modular initramfs generator (core tools)
ii installation-report 2.97 all system installation report
ii intel-microcode 3.20250512.1 amd64 Processor microcode firmware for Intel CPUs
ii iproute2 6.15.0-1 amd64 networking and traffic control tools
ii iptables 1.8.11-2 amd64 administration tools for packet filtering and NAT
ii iputils-ping 3:20240905-3 amd64 Tools to test the reachability of network hosts
ii iso-codes 4.18.0-1 all ISO language, territory, currency, script codes and their translations
ii ispell 3.4.06-1 amd64 International Ispell (an interactive spelling corrector)
ii iucode-tool 2.3.1-3 amd64 Intel processor microcode tool
ii kbd 2.7.1-2 amd64 Linux console font and keytable utilities
ii keyboard-configuration 1.240 all system-wide keyboard preferences
ii klibc-utils 2.0.14-1 amd64 small utilities built with klibc for early boot
ii kmod 34.2-2 amd64 tools for managing Linux kernel modules
ii krb5-locales 1.21.3-5 all internationalization support for MIT Kerberos
ii laptop-detect 0.16+nmu1 all system chassis type checker
ii ldap-utils 2.6.10+dfsg-1 amd64 OpenLDAP utilities
ii less 668-1 amd64 pager program similar to more
ii libabsl20240722 20240722.0-4 amd64 extensions to the C++ standard library
ii libacl1 2.3.2-2+b1 amd64 access control list - shared library
ii libaom3 3.12.1-1 amd64 AV1 Video Codec Library
ii libapache2-mod-php 2:8.4+96 all server-side, HTML-embedded scripting language (Apache 2 module) (default)
ii libapache2-mod-php8.4 8.4.11-1 amd64 server-side, HTML-embedded scripting language (Apache 2 module)
ii libapparmor1 4.1.0-1 amd64 changehat AppArmor library
ii libapr1t64 1.7.5-1 amd64 Apache Portable Runtime Library
ii libaprutil1-dbd-sqlite3 1.6.3-3+b1 amd64 Apache Portable Runtime Utility Library - SQLite3 Driver
ii libaprutil1-ldap 1.6.3-3+b1 amd64 Apache Portable Runtime Utility Library - LDAP Driver
ii libaprutil1t64 1.6.3-3+b1 amd64 Apache Portable Runtime Utility Library
ii libapt-pkg7.0 3.0.3 amd64 package management runtime library
ii libargon2-1 0~20190702+dfsg-4+b2 amd64 memory-hard hashing function - runtime library
ii libatomic1 14.2.0-19 amd64 support library providing __atomic built-in functions
ii libattr1 1:2.5.2-3 amd64 extended attribute handling - shared library
ii libaudit-common 1:4.0.2-2 all Dynamic library for security auditing - common files
ii libaudit1 1:4.0.2-2+b2 amd64 Dynamic library for security auditing
ii libavahi-client3 0.8-16 amd64 Avahi client library
ii libavahi-common-data 0.8-16 amd64 Avahi common data files
ii libavahi-common3 0.8-16 amd64 Avahi common library
ii libavif16 1.2.1-1.2 amd64 Library for handling .avif files
ii libbasicobjects0t64 0.6.2-3 amd64 Basic object types for C
ii libbcg729-0 1.1.1-3 amd64 ITU G.729 Annex A compatible audio codec
ii libblkid1 2.41-5 amd64 block device ID library
ii libbpf1 1:1.5.0-3 amd64 eBPF helper library (shared library)
ii libbrotli1 1.1.0-2+b7 amd64 library implementing brotli encoder and decoder (shared libraries)
ii libbsd0 0.12.2-2 amd64 utility functions from BSD systems - shared library
ii libbz2-1.0 1.0.8-6 amd64 high-quality block-sorting file compressor library - runtime
ii libc-bin 2.41-12 amd64 GNU C Library: Binaries
ii libc-l10n 2.41-12 all GNU C Library: localization files
ii libc6 2.41-12 amd64 GNU C Library: Shared libraries
ii libcap-ng0 0.8.5-4+b1 amd64 alternate POSIX capabilities library
ii libcap2 1:2.75-10+b1 amd64 POSIX 1003.1e capabilities (library)
ii libcap2-bin 1:2.75-10+b1 amd64 POSIX 1003.1e capabilities (utilities)
ii libcares2 1.34.5-1 amd64 asynchronous name resolver
ii libcbor0.10 0.10.2-2 amd64 library for parsing and generating CBOR (RFC 7049)
ii libcollection4t64 0.6.2-3 amd64 Collection data-type for C
ii libcom-err2 1.47.2-3+b3 amd64 common error description library
ii libcrack2 2.9.6-5.2+b1 amd64 pro-active password checker library
ii libcrypt1 1:4.4.38-1 amd64 libcrypt shared library
ii libcurl4t64 8.14.1-2 amd64 easy-to-use client-side URL transfer library (OpenSSL flavour)
ii libdav1d7 1.5.1-1 amd64 fast and small AV1 video stream decoder (shared library)
ii libdb5.3t64 5.3.28+dfsg2-9 amd64 Berkeley v5.3 Database Libraries [runtime]
ii libdbus-1-3 1.16.2-2 amd64 simple interprocess messaging system (library)
ii libde265-0 1.0.15-1+b3 amd64 Open H.265 video codec implementation
ii libdebconfclient0 0.280 amd64 Debian Configuration Management System (C-implementation library)
ii libdeflate0 1.23-2 amd64 fast, whole-buffer DEFLATE-based compression and decompression
ii libdevmapper1.02.1 2:1.02.205-2 amd64 Linux Kernel Device Mapper userspace library
ii libdhash1t64 0.6.2-3 amd64 Dynamic hash table
ii libduktape207 2.7.0-2+b2 amd64 embeddable Javascript engine, library
ii libedit2 3.1-20250104-1 amd64 BSD editline and history libraries
ii libefiboot1t64 38-3.1+b1 amd64 Library to manage UEFI variables
ii libefivar1t64 38-3.1+b1 amd64 Library to manage UEFI variables
ii libelf1t64 0.192-4 amd64 library to read and write ELF files
ii libexpat1 2.7.1-2 amd64 XML parsing C library - runtime library
ii libext2fs2t64 1.47.2-3+b3 amd64 ext2/ext3/ext4 file system libraries
ii libfdisk1 2.41-5 amd64 fdisk partitioning library
ii libffi8 3.4.8-2 amd64 Foreign Function Interface library runtime
ii libfido2-1 1.15.0-1+b1 amd64 library for generating and verifying FIDO 2.0 objects
ii libfontconfig1 2.15.0-2.3 amd64 generic font configuration library - runtime
ii libfreetype6 2.13.3+dfsg-1 amd64 FreeType 2 font engine, shared library files
ii libfstrm0 0.6.1-1+b3 amd64 Frame Streams (fstrm) library
ii libfuse3-4 3.17.2-3 amd64 Filesystem in Userspace (library) (3.x version)
ii libgav1-1 0.19.0-3+b1 amd64 AV1 decoder developed by Google -- runtime library
ii libgcc-s1 14.2.0-19 amd64 GCC support library
ii libgcrypt20 1.11.0-7 amd64 LGPL Crypto library - runtime library
ii libgd3 2.3.3-13 amd64 GD Graphics Library
ii libgdbm-compat4t64 1.24-2 amd64 GNU dbm database routines (legacy support runtime version)
ii libgdbm6t64 1.24-2 amd64 GNU dbm database routines (runtime version)
ii libglib2.0-0t64 2.84.4-3~deb13u1 amd64 GLib library of C routines
ii libglib2.0-data 2.84.4-3~deb13u1 all Common files for GLib library
ii libgmp10 2:6.3.0+dfsg-3 amd64 Multiprecision arithmetic library
ii libgnutls30t64 3.8.9-3 amd64 GNU TLS library - main runtime library
ii libgomp1 14.2.0-19 amd64 GCC OpenMP (GOMP) support library
ii libgpg-error-l10n 1.51-4 all library of error values and messages in GnuPG (localization files)
ii libgpg-error0 1.51-4 amd64 GnuPG development runtime library
ii libgssapi-krb5-2 1.21.3-5 amd64 MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
ii libheif-plugin-aomenc 1.19.8-1 amd64 HEIF and AVIF file format decoder and encoder - aomenc plugin
ii libheif-plugin-dav1d 1.19.8-1 amd64 HEIF and AVIF file format decoder and encoder - dav1d plugin
ii libheif-plugin-libde265 1.19.8-1 amd64 HEIF and AVIF file format decoder and encoder - libde265 plugin
ii libheif-plugin-x265 1.19.8-1 amd64 HEIF and AVIF file format decoder and encoder - x265 plugin
ii libheif1 1.19.8-1 amd64 HEIF and AVIF file format decoder and encoder - shared library
ii libhogweed6t64 3.10.1-1 amd64 low level cryptographic library (public-key cryptos)
ii libicu76 76.1-4 amd64 International Components for Unicode
ii libidn2-0 2.3.8-2 amd64 Internationalized domain names (IDNA2008/TR46) library
ii libimagequant0 2.18.0-1+b2 amd64 palette quantization library
ii libini-config5t64 0.6.2-3 amd64 INI file parser for C
ii libip4tc2 1.8.11-2 amd64 netfilter libip4tc library
ii libip6tc2 1.8.11-2 amd64 netfilter libip6tc library
ii libipa-hbac0t64 2.10.1-2+b1 amd64 FreeIPA HBAC Evaluator library
ii libjansson4 2.14-2+b3 amd64 C library for encoding, decoding and manipulating JSON data
ii libjbig0 2.1-6.1+b2 amd64 JBIGkit libraries
ii libjemalloc2 5.3.0-3 amd64 general-purpose scalable concurrent malloc(3) implementation
ii libjpeg62-turbo 1:2.1.5-4 amd64 libjpeg-turbo JPEG runtime library
ii libjson-c5 0.18+ds-1 amd64 JSON manipulation library - shared library
ii libk5crypto3 1.21.3-5 amd64 MIT Kerberos runtime libraries - Crypto Library
ii libkeyutils1 1.6.3-6 amd64 Linux Key Management Utilities (library)
ii libklibc 2.0.14-1 amd64 minimal libc subset for use with initramfs
ii libkmod2 34.2-2 amd64 libkmod shared library
ii libkrb5-3 1.21.3-5 amd64 MIT Kerberos runtime libraries
ii libkrb5support0 1.21.3-5 amd64 MIT Kerberos runtime libraries - Support library
ii liblastlog2-2 2.41-5 amd64 lastlog2 database shared library
ii libldap-common 2.6.10+dfsg-1 all OpenLDAP common files for libraries
ii libldap2 2.6.10+dfsg-1 amd64 OpenLDAP libraries
ii libldb2 2:2.11.0+samba4.22.4+dfsg-1~deb13u1 amd64 LDAP-like embedded database - shared library
ii liblerc4 4.0.0+ds-5 amd64 Limited Error Raster Compression library
ii liblmdb0 0.9.31-1+b2 amd64 Lightning Memory-Mapped Database shared library
ii liblocale-gettext-perl 1.07-7+b1 amd64 module using libc functions for internationalization in Perl
ii liblockfile-bin 1.17-2 amd64 support binaries for and cli utilities based on liblockfile
ii liblsof0 4.99.4+dfsg-2 amd64 utility to list open files (shared library)
ii liblua5.4-0 5.4.7-1+b2 amd64 Shared library for the Lua interpreter version 5.4
ii liblz4-1 1.10.0-4 amd64 Fast LZ compression algorithm library - runtime
ii liblzma5 5.8.1-1 amd64 XZ-format compression library
ii libmagic-mgc 1:5.46-5 amd64 File type determination library using "magic" numbers (compiled magic file)
ii libmagic1t64 1:5.46-5 amd64 Recognize the type of data in a file using "magic" numbers - library
ii libmaxminddb0 1.12.2-1 amd64 IP geolocation database library
ii libmd0 1.1.0-2+b1 amd64 message digest functions from BSD systems - shared library
ii libmnl0 1.0.5-3 amd64 minimalistic Netlink communication library
ii libmount1 2.41-5 amd64 device mounting library
ii libncursesw6 6.5+20250216-2 amd64 shared libraries for terminal handling (wide character support)
ii libnetfilter-conntrack3 1.1.0-1 amd64 Netfilter netlink-conntrack library
ii libnettle8t64 3.10.1-1 amd64 low level cryptographic library (symmetric and one-way cryptos)
ii libnewt0.52 0.52.25-1 amd64 Not Erik's Windowing Toolkit - text mode windowing with slang
ii libnfnetlink0 1.0.2-3 amd64 Netfilter netlink library
ii libnfsidmap1 1:2.8.3-1 amd64 NFS idmapping library
ii libnftables1 1.1.3-1 amd64 Netfilter nftables high level userspace API library
ii libnftnl11 1.2.9-1 amd64 Netfilter nftables userspace API library
ii libnghttp2-14 1.64.0-1.1 amd64 library implementing HTTP/2 protocol (shared library)
ii libnghttp3-9 1.8.0-1 amd64 HTTP/3 library with QUIC and QPACK (library)
ii libnl-3-200 3.7.0-2 amd64 library for dealing with netlink sockets
ii libnl-genl-3-200 3.7.0-2 amd64 library for dealing with netlink sockets - generic netlink
ii libnl-route-3-200 3.7.0-2 amd64 library for dealing with netlink sockets - route interface
ii libnss-myhostname 257.8-1~deb13u2 amd64 nss module providing fallback resolution for the current hostname
ii libnss-resolve 257.8-1~deb13u2 amd64 nss module to resolve names via systemd-resolved
ii libnss-sss 2.10.1-2+b1 amd64 Nss library for the System Security Services Daemon
ii libnss-systemd 257.8-1~deb13u2 amd64 nss module providing dynamic user and group name resolution
ii libnuma1 2.0.19-1 amd64 Libraries for controlling NUMA policy
ii libopencore-amrnb0 0.1.6-1+b2 amd64 Adaptive Multi Rate speech codec - shared library
ii libopus0 1.5.2-2 amd64 Opus codec runtime library
ii libp11-kit0 0.25.5-3 amd64 library for loading and coordinating access to PKCS#11 modules - runtime
ii libpam-modules 1.7.0-5 amd64 Pluggable Authentication Modules for PAM
ii libpam-modules-bin 1.7.0-5 amd64 Pluggable Authentication Modules for PAM - helper binaries
ii libpam-pwquality 1.4.5-5 amd64 PAM module to check password strength
ii libpam-runtime 1.7.0-5 all Runtime support for the PAM library
ii libpam-sss 2.10.1-2+b1 amd64 Pam module for the System Security Services Daemon
ii libpam-systemd 257.8-1~deb13u2 amd64 system and service manager - PAM module
ii libpam-wtmpdb 0.73.0-3 amd64 wtmp database PAM module
ii libpam0g 1.7.0-5 amd64 Pluggable Authentication Modules library
ii libpath-utils1t64 0.6.2-3 amd64 Filesystem Path Utilities
ii libpcap0.8t64 1.10.5-2 amd64 system interface for user-level packet capture
ii libpci3 1:3.13.0-2 amd64 PCI utilities (shared library)
ii libpcre2-8-0 10.46-1~deb13u1 amd64 New Perl Compatible Regular Expression Library- 8 bit runtime files
ii libperl5.40 5.40.1-6 amd64 shared Perl library
ii libpipeline1 1.5.8-1 amd64 Unix process pipeline manipulation library
ii libpng16-16t64 1.6.48-1 amd64 PNG library - runtime (version 1.6)
ii libpolkit-agent-1-0 126-2 amd64 polkit Authentication Agent API
ii libpolkit-gobject-1-0 126-2 amd64 polkit Authorization API
ii libpopt0 1.19+dfsg-2 amd64 lib for parsing cmdline parameters
ii libproc2-0 2:4.0.4-9 amd64 library for accessing process information from /proc
ii libprotobuf-c1 1.5.1-1 amd64 Protocol Buffers C shared library (protobuf-c)
ii libpsl5t64 0.21.2-1.1+b1 amd64 Library for Public Suffix List (shared libraries)
ii libpwquality-common 1.4.5-5 all library for password quality checking and generation (data files)
ii libpwquality1 1.4.5-5 amd64 library for password quality checking and generation
ii libpython3-stdlib 3.13.5-1 amd64 interactive high-level object-oriented language (default python3 version)
ii libpython3.13-minimal 3.13.5-2 amd64 Minimal subset of the Python language (version 3.13)
ii libpython3.13-stdlib 3.13.5-2 amd64 Interactive high-level object-oriented language (standard library, version 3.13)
ii librav1e0.7 0.7.1-9+b2 amd64 Fastest and safest AV1 encoder - shared library
ii libreadline8t64 8.2-6 amd64 GNU readline and history libraries, run-time libraries
ii libref-array1t64 0.6.2-3 amd64 refcounted array for C
ii librtmp1 2.4+20151223.gitfa8646d.1-2+b5 amd64 toolkit for RTMP streams (shared library)
ii libsasl2-2 2.1.28+dfsg1-9 amd64 Cyrus SASL - authentication abstraction library
ii libsasl2-modules 2.1.28+dfsg1-9 amd64 Cyrus SASL - pluggable authentication modules
ii libsasl2-modules-db 2.1.28+dfsg1-9 amd64 Cyrus SASL - pluggable authentication modules (DB)
ii libsasl2-modules-gssapi-mit 2.1.28+dfsg1-9 amd64 Cyrus SASL - pluggable authentication modules (GSSAPI)
ii libsbc1 2.1-1 amd64 Sub Band CODEC library - runtime
ii libseccomp2 2.6.0-2 amd64 high level interface to Linux seccomp filter
ii libselinux1 3.8.1-1 amd64 SELinux runtime shared libraries
ii libsemanage-common 3.8.1-1 all Common files for SELinux policy management libraries
ii libsemanage2 3.8.1-1 amd64 SELinux policy management library
ii libsepol2 3.8.1-1 amd64 SELinux library for manipulating binary security policies
ii libsharpyuv0 1.5.0-0.1 amd64 Library for sharp RGB to YUV conversion
ii libslang2 2.3.3-5+b2 amd64 S-Lang programming library - runtime version
ii libsmartcols1 2.41-5 amd64 smart column output alignment library
ii libsmbclient0 2:4.22.4+dfsg-1~deb13u1 amd64 shared library for communication with SMB/CIFS servers
ii libsmi2t64 0.4.8+dfsg2-17+b1 amd64 library to access SMI MIB information
ii libsnappy1v5 1.2.2-1 amd64 fast compression/decompression library
ii libsodium23 1.0.18-1+b2 amd64 Network communication, cryptography and signaturing library
ii libspandsp2t64 0.0.6+dfsg-2.2 amd64 Telephony signal processing library
ii libspeexdsp1 1.2.1-3 amd64 DSP library derived from speex
ii libsqlite3-0 3.46.1-7 amd64 SQLite 3 shared library
ii libss2 1.47.2-3+b3 amd64 command-line interface parsing library
ii libssh-4 0.11.2-1 amd64 tiny C SSH library (OpenSSL flavor)
ii libssh2-1t64 1.11.1-1 amd64 SSH2 client-side library
ii libssl3t64 3.5.1-1 amd64 Secure Sockets Layer toolkit - shared libraries
ii libsss-certmap0 2.10.1-2+b1 amd64 Certificate mapping library for SSSD
ii libsss-idmap0 2.10.1-2+b1 amd64 ID mapping library for SSSD
ii libsss-nss-idmap0 2.10.1-2+b1 amd64 SID based lookups library for SSSD
ii libstdc++6 14.2.0-19 amd64 GNU Standard C++ Library v3
ii libsvtav1enc2 2.3.0+dfsg-1 amd64 Scalable Video Technology for AV1 (libsvtav1enc shared library)
ii libsystemd-shared 257.8-1~deb13u2 amd64 systemd shared private library
ii libsystemd0 257.8-1~deb13u2 amd64 systemd utility library
ii libtalloc2 2:2.4.3+samba4.22.4+dfsg-1~deb13u1 amd64 hierarchical pool based memory allocator
ii libtasn1-6 4.20.0-2 amd64 Manage ASN.1 structures (runtime)
ii libtdb1 2:1.4.13+samba4.22.4+dfsg-1~deb13u1 amd64 Trivial Database - shared library
ii libtevent0t64 2:0.16.2+samba4.22.4+dfsg-1~deb13u1 amd64 talloc-based event loop library - shared library
ii libtext-charwidth-perl 0.04-11+b4 amd64 get display widths of characters on the terminal
ii libtext-iconv-perl 1.7-8+b4 amd64 module to convert between character sets in Perl
ii libtext-wrapi18n-perl 0.06-10 all internationalized substitute of Text::Wrap
ii libtiff6 4.7.0-3 amd64 Tag Image File Format (TIFF) library
ii libtinfo6 6.5+20250216-2 amd64 shared low-level terminfo library for terminal handling
ii libtirpc-common 1.3.6+ds-1 all transport-independent RPC library - common files
ii libtirpc3t64 1.3.6+ds-1 amd64 transport-independent RPC library
ii libuchardet0 0.0.8-1+b2 amd64 universal charset detection library - shared library
ii libudev1 257.8-1~deb13u2 amd64 libudev shared library
ii libunistring5 1.3-2 amd64 Unicode string library for C
ii liburcu8t64 0.15.2-2 amd64 userspace RCU (read-copy-update) library
ii libusb-1.0-0 2:1.0.28-1 amd64 userspace USB programming library
ii libuuid1 2.41-5 amd64 Universally Unique ID library
ii libuv1t64 1.50.0-2 amd64 asynchronous event notification library - runtime library
ii libwbclient0 2:4.22.4+dfsg-1~deb13u1 amd64 Samba winbind client library
ii libwebp7 1.5.0-0.1 amd64 Lossy compression of digital photographic images (shared library)
ii libwireshark-data 4.4.7-1 all network packet dissection library -- data files
ii libwireshark18 4.4.7-1 amd64 network packet dissection library -- shared library
ii libwiretap15 4.4.7-1 amd64 network packet capture library -- shared library
ii libwrap0 7.6.q-36 amd64 Wietse Venema's TCP wrappers library
ii libwsutil16 4.4.7-1 amd64 network packet dissection utilities library -- shared library
ii libwtmpdb0 0.73.0-3 amd64 wtmp database shared library
ii libx11-6 2:1.8.12-1 amd64 X11 client-side library
ii libx11-data 2:1.8.12-1 all X11 client-side library
ii libx265-215 4.1-2 amd64 H.265/HEVC video stream encoder (shared library)
ii libxau6 1:1.0.11-1 amd64 X11 authorisation library
ii libxcb1 1.17.0-2+b1 amd64 X C Binding
ii libxdmcp6 1:1.1.5-1 amd64 X11 Display Manager Control Protocol library
ii libxext6 2:1.3.4-1+b3 amd64 X11 miscellaneous extension library
ii libxml2 2.12.7+dfsg+really2.9.14-2.1+deb13u1 amd64 GNOME XML library
ii libxmuu1 2:1.1.3-3+b4 amd64 X11 miscellaneous micro-utility library
ii libxpm4 1:3.5.17-1+b3 amd64 X11 pixmap library
ii libxtables12 1.8.11-2 amd64 netfilter xtables library
ii libxxhash0 0.8.3-2 amd64 shared library for xxhash
ii libyuv0 0.0.1904.20250204-1 amd64 Library for YUV scaling (shared library)
ii libzstd1 1.5.7+dfsg-1 amd64 fast lossless compression algorithm
ii linux-base 4.12 all Linux image base package
ii linux-image-6.12.43+deb13-amd64 6.12.43-1 amd64 Linux 6.12 for 64-bit PCs (signed)
ii linux-image-6.12.48+deb13-amd64 6.12.48-1 amd64 Linux 6.12 for 64-bit PCs (signed)
ii linux-image-amd64 6.12.48-1 amd64 Linux for 64-bit PCs (meta-package)
ii linux-sysctl-defaults 4.12 all default sysctl configuration for Linux
ii locales 2.41-12 all GNU C Library: National Language (locale) data [support]
ii login 1:4.16.0-2+really2.41-5 amd64 system login tools
ii login.defs 1:4.17.4-2 all system user management configuration
ii logrotate 3.22.0-1 amd64 Log rotation utility
ii logsave 1.47.2-3+b3 amd64 save the output of a command in a log file
ii lsb-release 12.1-1 all Linux Standard Base version reporting utility (minimal implementation)
ii lsof 4.99.4+dfsg-2 amd64 utility to list open files
ii man-db 2.13.1-1 amd64 tools for reading manual pages
ii manpages 6.9.1-1 all Manual pages about using a GNU/Linux system
ii mawk 1.3.4.20250131-1 amd64 Pattern scanning and text processing language
ii media-types 13.0.0 all List of standard media types and their usual file extension
ii mount 2.41-5 amd64 tools for mounting and manipulating filesystems
ii nano 8.4-1 amd64 small, friendly text editor inspired by Pico
ii ncurses-base 6.5+20250216-2 all basic terminal type definitions
ii ncurses-bin 6.5+20250216-2 amd64 terminal-related programs and man pages
ii ncurses-term 6.5+20250216-2 all additional terminal type definitions
ii netbase 6.5 all Basic TCP/IP networking system
ii netcat-traditional 1.10-50 amd64 TCP/IP swiss army knife
ii nftables 1.1.3-1 amd64 Program to control packet filtering rules by Netfilter project
ii openssh-client 1:10.0p1-7 amd64 secure shell (SSH) client, for secure access to remote machines
ii openssh-server 1:10.0p1-7 amd64 secure shell (SSH) server, for secure access from remote machines
ii openssh-sftp-server 1:10.0p1-7 amd64 secure shell (SSH) sftp server module, for SFTP access from remote machines
ii openssl 3.5.1-1 amd64 Secure Sockets Layer toolkit - cryptographic utility
ii openssl-provider-legacy 3.5.1-1 amd64 Secure Sockets Layer toolkit - cryptographic utility
ii os-prober 1.83 amd64 utility to detect other OSes on a set of drives
ii passwd 1:4.17.4-2 amd64 change and administer password and group data
ii pci.ids 0.0~2025.06.09-1 all PCI ID Repository
ii pciutils 1:3.13.0-2 amd64 PCI utilities
ii perl 5.40.1-6 amd64 Larry Wall's Practical Extraction and Report Language
ii perl-base 5.40.1-6 amd64 minimal Perl system
ii perl-modules-5.40 5.40.1-6 all Core Perl modules
ii php 2:8.4+96 all server-side, HTML-embedded scripting language (default)
ii php-common 2:96 all Common files for PHP packages
ii php8.4 8.4.11-1 all server-side, HTML-embedded scripting language (metapackage)
ii php8.4-cli 8.4.11-1 amd64 command-line interpreter for the PHP scripting language
ii php8.4-common 8.4.11-1 amd64 documentation, examples and common module for PHP
ii php8.4-opcache 8.4.11-1 amd64 Zend OpCache module for PHP
ii php8.4-readline 8.4.11-1 amd64 readline module for PHP
ii polkitd 126-2 amd64 framework for managing administrative policies and privileges
ii procps 2:4.0.4-9 amd64 /proc file system utilities
ii psmisc 23.7-2 amd64 utilities that use the proc file system
ii publicsuffix 20250328.1952-0.1 all accurate, machine-readable list of domain name suffixes
ii python-apt-common 3.0.0 all Python interface to libapt-pkg (locales)
ii python3 3.13.5-1 amd64 interactive high-level object-oriented language (default python3 version)
ii python3-apt 3.0.0 amd64 Python 3 interface to libapt-pkg
ii python3-certifi 2025.1.31+ds-1 all root certificates for validating SSL certs and verifying TLS hosts (python3)
ii python3-chardet 5.2.0+dfsg-2 all Universal Character Encoding Detector (Python3)
ii python3-charset-normalizer 3.4.2-1 amd64 charset, encoding and language detection (Python 3)
ii python3-debconf 1.5.91 all interact with debconf from Python 3
ii python3-debian 1.0.1 all Python 3 modules to work with Debian-related data formats
ii python3-debianbts 4.1.1 all Python interface to Debian's Bug Tracking System
ii python3-idna 3.10-1 all Python IDNA2008 (RFC 5891) handling (Python 3)
ii python3-minimal 3.13.5-1 amd64 minimal subset of the Python language (default python3 version)
ii python3-reportbug 13.2.0 all Python modules for interacting with bug tracking systems
ii python3-requests 2.32.3+dfsg-5 all elegant and simple HTTP library for Python3, built for human beings
ii python3-sss 2.10.1-2+b1 amd64 Python3 module for the System Security Services Daemon
ii python3-systemd 235-1+b6 amd64 Python 3 bindings for systemd
ii python3-urllib3 2.3.0-3 all HTTP library with thread-safe connection pooling for Python3
ii python3.13 3.13.5-2 amd64 Interactive high-level object-oriented language (version 3.13)
ii python3.13-minimal 3.13.5-2 amd64 Minimal subset of the Python language (version 3.13)
ii readline-common 8.2-6 all GNU readline and history libraries, common files
ii realmd 0.17.1-3+b2 amd64 DBus service for configuring kerberos and other online identities
ii reportbug 13.2.0 all reports bugs in the Debian distribution
ii runit-helper 2.16.4 all dh-runit implementation detail
ii samba-libs 2:4.22.4+dfsg-1~deb13u1 amd64 Samba core libraries
ii sed 4.9-2 amd64 GNU stream editor for filtering/transforming text
ii sensible-utils 0.0.25 all Utilities for sensible alternative selection
ii sgml-base 1.31+nmu1 all SGML infrastructure and SGML catalog file support
ii shared-mime-info 2.4-5+b2 amd64 FreeDesktop.org shared MIME database and spec
ii sqv 1.3.0-3 amd64 OpenPGP signature verification program from Sequoia
ii ssl-cert 1.1.3 all simple debconf wrapper for OpenSSL
ii sssd 2.10.1-2+b1 amd64 System Security Services Daemon -- metapackage
ii sssd-ad 2.10.1-2+b1 amd64 System Security Services Daemon -- Active Directory back end
ii sssd-ad-common 2.10.1-2+b1 amd64 System Security Services Daemon -- PAC responder
ii sssd-common 2.10.1-2+b1 amd64 System Security Services Daemon -- common files
ii sssd-dbus 2.10.1-2+b1 amd64 System Security Services Daemon -- D-Bus responder
ii sssd-ipa 2.10.1-2+b1 amd64 System Security Services Daemon -- IPA back end
ii sssd-krb5 2.10.1-2+b1 amd64 System Security Services Daemon -- Kerberos back end
ii sssd-krb5-common 2.10.1-2+b1 amd64 System Security Services Daemon -- Kerberos helpers
ii sssd-ldap 2.10.1-2+b1 amd64 System Security Services Daemon -- LDAP back end
ii sssd-proxy 2.10.1-2+b1 amd64 System Security Services Daemon -- proxy back end
ii sssd-tools 2.10.1-2+b1 amd64 System Security Services Daemon -- tools
ii sudo 1.9.16p2-3 amd64 Provide limited super user privileges to specific users
ii systemd 257.8-1~deb13u2 amd64 system and service manager
ii systemd-resolved 257.8-1~deb13u2 amd64 systemd DNS resolver
ii systemd-sysv 257.8-1~deb13u2 amd64 system and service manager - SysV compatibility symlinks
ii systemd-timesyncd 257.8-1~deb13u2 amd64 minimalistic service to synchronize local time with NTP servers
ii sysvinit-utils 3.14-4 amd64 System-V-like utilities
ii tar 1.35+dfsg-3.1 amd64 GNU version of the tar archiving utility
ii task-english 3.81 all General English environment
ii task-ssh-server 3.81 all SSH server
ii task-web-server 3.81 all web server
ii tasksel 3.81 all tool for selecting tasks for installation on Debian systems
ii tasksel-data 3.81 all official tasks used for installation of Debian systems
ii tnftp 20230507-2+b1 amd64 enhanced ftp client
ii traceroute 1:2.1.6-1 amd64 Traces the route taken by packets over an IPv4/IPv6 network
ii tshark 4.4.7-1 amd64 network traffic analyzer - console version
ii tzdata 2025b-4+deb13u1 all time zone and daylight-saving time data
ii ucf 3.0052 all Update Configuration File(s): preserve user changes to config files
ii udev 257.8-1~deb13u2 amd64 /dev/ and hotplug management daemon
ii ufw 0.36.2-9 all program for managing a Netfilter firewall
ii usbutils 1:018-2 amd64 Linux USB utilities
ii util-linux 2.41-5 amd64 miscellaneous system utilities
ii util-linux-extra 2.41-5 amd64 interactive login tools
ii util-linux-locales 2.41-5 all locales files for util-linux
ii vim-common 2:9.1.1230-2 all Vi IMproved - Common files
ii vim-tiny 2:9.1.1230-2 amd64 Vi IMproved - enhanced vi editor - compact version
ii vsftpd 3.0.5-0.2 amd64 lightweight, efficient FTP server written for security
ii wamerican 2020.12.07-4 all American English dictionary words for /usr/share/dict
ii wget 1.25.0-2 amd64 retrieves files from the web
ii whiptail 0.52.25-1 amd64 Displays user-friendly dialog boxes from shell scripts
ii wireshark-common 4.4.7-1 amd64 network traffic analyzer - common files
ii wtmpdb 0.73.0-3 amd64 utility to display login/logout/reboot information
ii xauth 1:1.1.2-1.1 amd64 X authentication utility
ii xdg-user-dirs 0.18-2 amd64 tool to manage well known user directories
ii xkb-data 2.42-1 all X Keyboard Extension (XKB) configuration data
ii xml-core 0.19 all XML infrastructure and XML catalog file support
ii xz-utils 5.8.1-1 amd64 XZ-format compression utilities
ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1 amd64 compression library - runtime
ii zstd 1.5.7+dfsg-1 amd64 fast lossless compression algorithm -- CLI tool

The remote service implements TCP timestamps.

The remote host implements TCP timestamps, as defined by RFC1323. A side effect of this feature is that the uptime of the remote host can sometimes be computed.

n/a

None

Published: 2007/05/16, Modified: 2023/10/17

Nessus was able to log in to the remote host using the provided credentials. The provided credentials were not sufficient to complete all requested checks.

Nessus was able to execute credentialed checks because it was possible to log in to the remote host using provided credentials, however the credentials were not sufficiently privileged to complete all requested checks.

n/a

None

Published: 2018/06/06, Modified: 2024/03/25

Nessus was able to log into the remote host, however this credential
did not have sufficient privileges for all planned checks :

User: 'londonlogin'
Port: 22
Proto: SSH
Method: password
Escalation: sudo


See the output of the following plugin for details :

Plugin ID : 102094
Plugin Name : SSH Commands Require Privilege Escalation

Valid credentials were provided for an available authentication protocol.

Nessus was able to determine that valid credentials were provided for an authentication protocol available on the remote target because it was able to successfully authenticate directly to the remote target using that authentication protocol at least once. Authentication was successful because the authentication protocol service was available remotely, the service was able to be identified, the authentication protocol was able to be negotiated successfully, and a set of credentials provided in the scan policy for that authentication protocol was accepted by the remote service. See plugin output for details, including protocol, port, and account.

Please note the following :

- This plugin reports per protocol, so it is possible for valid credentials to be provided for one protocol and not another. For example, authentication may succeed via SSH but fail via SMB, while no credentials were provided for an available SNMP service.

- Providing valid credentials for all available authentication protocols may improve scan coverage, but the value of successful authentication for a given protocol may vary from target to target depending upon what data (if any) is gathered from the target via that protocol. For example, successful authentication via SSH is more valuable for Linux targets than for Windows targets, and likewise successful authentication via SMB is more valuable for Windows targets than for Linux targets.

n/a

None

Published: 2020/10/15, Modified: 2024/03/25

Nessus was able to log in to the remote host via the following :

User: 'londonlogin'
Port: 22
Proto: SSH
Method: password
Escalation: sudo

The system has been started.

Using the supplied credentials, Nessus was able to determine when the host was last started.

n/a

None

Published: 2011/10/12, Modified: 2018/06/19

reboot system boot 6.12.48+deb13-am Sat Jan 10 17:23 - still running
reboot system boot 6.12.48+deb13-am Fri Jan 9 23:27 - 02:03 (02:36)
reboot system boot 6.12.48+deb13-am Fri Jan 9 21:39 - 21:46 (00:06)
reboot system boot 6.12.48+deb13-am Fri Jan 9 17:50 - 19:27 (01:36)
reboot system boot 6.12.48+deb13-am Mon Jan 5 09:28 - 10:33 (01:04)
reboot system boot 6.12.48+deb13-am Mon Nov 17 15:09 - 15:12 (00:02)
reboot system boot 6.12.48+deb13-am Mon Nov 10 15:38 - 17:51 (02:13)
reboot system boot 6.12.48+deb13-am Mon Nov 10 09:12 - 10:56 (01:43)
reboot system boot 6.12.48+deb13-am Mon Oct 20 09:48 - 10:04 (00:16)
reboot system boot 6.12.48+deb13-am Mon Oct 20 09:46 - 09:48 (00:01)
reboot system boot 6.12.48+deb13-am Mon Oct 20 09:08 - 09:43 (00:34)
reboot system boot 6.12.48+deb13-am Mon Oct 13 15:28 - 15:48 (00:19)
reboot system boot 6.12.48+deb13-am Mon Oct 6 10:10 - 16:12 (06:02)
reboot system boot 6.12.48+deb13-am Mon Oct 6 08:57 - 09:32 (00:34)
reboot system boot 6.12.48+deb13-am Mon Oct 6 08:55 - 08:57 (00:02)
reboot system boot 6.12.48+deb13-am Mon Oct 6 08:48 - 08:54 (00:05)
reboot system boot 6.12.48+deb13-am Mon Sep 29 12:38 - crash
reboot system boot 6.12.48+deb13-am Mon Sep 29 12:00 - crash
reboot system boot 6.12.48+deb13-am Mon Sep 29 05:38 - crash
reboot system boot 6.12.48+deb13-am Mon Sep 29 04:44 - crash
reboot system boot 6.12.48+deb13-am Mon Sep 29 04:36 - 04:44 (00:07)
reboot system boot 6.12.48+deb13-am Mon Sep 29 04:28 - 04:36 (00:08)
reboot system boot 6.12.48+deb13-am Mon Sep 29 04:08 - 04:28 (00:19)
reboot system boot 6.12.48+deb13-am Mon Sep 29 04:08 - 04:08 (00:00)
reboot system boot 6.12.48+deb13-am Sun Sep 28 06:06 - crash
reboot system boot 6.12.48+deb13-am Sat Sep 27 19:49 - crash
reboot system boot 6.12.48+deb13-am Sat Sep 27 19:44 - crash
reboot system boot 6.12.48+deb13-am Sat Sep 27 19:41 - crash
reboot system boot 6.12.48+deb13-am Sat Sep 27 19:35 - crash
reboot system boot 6.12.48+deb13-am Sat Sep 27 19:22 - crash
reboot system boot 6.12.48+deb13-am Sat Sep 27 19:20 - crash
reboot system boot 6.12.48+deb13-am Sat Sep 27 19:11 - crash

wtmpdb begins Sat Sep 27 19:11:39 2025

It was possible to obtain traceroute information.

Makes a traceroute to the remote host.

n/a

None

Published: 1999/11/27, Modified: 2023/12/04

For your information, here is the traceroute from 20.0.0.1 to 192.168.2.1 :
20.0.0.1
192.168.2.1

Hop Count: 1

Tukaani XZ Utils is installed on the remote Linux / Unix host.

Tukaani XZ Utils is installed on the remote Linux / Unix host.

XZ Utils consists of several components, including:
- liblzma
- xz

Additional information:

- More paths will be searched and the timeout for the search will be increased if 'Perform thorough tests' setting is enabled.

- The plugin timeout can be set to a custom value other than the plugin's default of 30 minutes via the 'timeout.192709' scanner setting in Nessus 8.15.1 or later.

Please see https://docs.tenable.com/nessus/Content/SettingsAdvanced.htm#Custom for more information.

n/a

None

Published: 2024/03/29, Modified: 2026/01/07

Nessus detected 2 installs of XZ Utils:

Path : /usr/lib/x86_64-linux-gnu/liblzma.so.5.8.1
Version : 5.8.1
Associated Package : liblzma5 5.8.1-1
Confidence : High
Managed by OS : True
Version Source : Package

Path : /usr/bin/xz
Version : 5.8.1
Associated Package : xz-utils 5.8.1-1
Confidence : High
Managed by OS : True
Version Source : Package

Uses /bin/ps auxww command to obtain the list of running processes on the target machine at scan time.

Generated report details the running processes on the target machine at scan time.
This plugin is informative only and could be used for forensic investigation, malware detection, and to confirm that your system processes conform to your system policies.

n/a

None

Published: 2018/06/12, Modified: 2023/11/27

USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.7 24136 14808 ? Ss 17:23 0:01 /sbin/init
root 2 0.0 0.0 0 0 ? S 17:23 0:00 [kthreadd]
root 3 0.0 0.0 0 0 ? S 17:23 0:00 [pool_workqueue_release]
root 4 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-kvfree_rcu_reclaim]
root 5 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-rcu_gp]
root 6 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-sync_wq]
root 7 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-slub_flushwq]
root 8 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-netns]
root 11 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/0:0H-events_highpri]
root 12 0.0 0.0 0 0 ? I 17:23 0:00 [kworker/u8:0-ipv6_addrconf]
root 13 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-mm_percpu_wq]
root 14 0.0 0.0 0 0 ? I 17:23 0:00 [rcu_tasks_kthread]
root 15 0.0 0.0 0 0 ? I 17:23 0:00 [rcu_tasks_rude_kthread]
root 16 0.0 0.0 0 0 ? I 17:23 0:00 [rcu_tasks_trace_kthread]
root 17 0.0 0.0 0 0 ? S 17:23 0:00 [ksoftirqd/0]
root 18 0.0 0.0 0 0 ? I 17:23 0:00 [rcu_preempt]
root 19 0.0 0.0 0 0 ? S 17:23 0:00 [rcu_exp_par_gp_kthread_worker/0]
root 20 0.0 0.0 0 0 ? S 17:23 0:00 [rcu_exp_gp_kthread_worker]
root 21 0.0 0.0 0 0 ? S 17:23 0:00 [migration/0]
root 22 0.0 0.0 0 0 ? S 17:23 0:00 [idle_inject/0]
root 23 0.0 0.0 0 0 ? S 17:23 0:00 [cpuhp/0]
root 24 0.0 0.0 0 0 ? S 17:23 0:00 [cpuhp/1]
root 25 0.0 0.0 0 0 ? S 17:23 0:00 [idle_inject/1]
root 26 0.0 0.0 0 0 ? S 17:23 0:00 [migration/1]
root 27 0.0 0.0 0 0 ? S 17:23 0:00 [ksoftirqd/1]
root 29 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/1:0H-events_highpri]
root 30 0.0 0.0 0 0 ? I 17:23 0:00 [kworker/u9:0-events_unbound]
root 34 0.0 0.0 0 0 ? S 17:23 0:00 [kdevtmpfs]
root 35 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-inet_frag_wq]
root 36 0.0 0.0 0 0 ? S 17:23 0:00 [kauditd]
root 37 0.0 0.0 0 0 ? S 17:23 0:00 [khungtaskd]
root 38 0.0 0.0 0 0 ? S 17:23 0:00 [oom_reaper]
root 40 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-writeback]
root 41 0.0 0.0 0 0 ? I 17:23 0:00 [kworker/u9:2-events_unbound]
root 42 0.0 0.0 0 0 ? S 17:23 0:01 [kcompactd0]
root 43 0.0 0.0 0 0 ? SN 17:23 0:00 [ksmd]
root 44 0.0 0.0 0 0 ? SN 17:23 0:00 [khugepaged]
root 45 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-kintegrityd]
root 46 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-kblockd]
root 47 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-blkcg_punt_bio]
root 48 0.0 0.0 0 0 ? S 17:23 0:00 [irq/9-acpi]
root 50 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-tpm_dev_wq]
root 51 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-edac-poller]
root 52 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-devfreq_wq]
root 54 0.0 0.0 0 0 ? S 17:23 0:00 [kswapd0]
root 61 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-kthrotld]
root 65 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-acpi_thermal_pm]
root 67 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-mld]
root 68 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/0:1H-kblockd]
root 69 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-ipv6_addrconf]
root 70 0.0 0.0 0 0 ? I 17:23 0:00 [kworker/u8:1-ipv6_addrconf]
root 75 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-kstrp]
root 77 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/u11:0]
root 78 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/u12:0]
root 79 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/u13:0]
root 189 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-ata_sff]
root 190 0.0 0.0 0 0 ? S 17:23 0:00 [scsi_eh_0]
root 191 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-scsi_tmf_0]
root 192 0.0 0.0 0 0 ? S 17:23 0:00 [scsi_eh_1]
root 193 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-scsi_tmf_1]
root 196 0.0 0.0 0 0 ? S 17:23 0:00 [scsi_eh_2]
root 197 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-scsi_tmf_2]
root 227 0.0 0.0 0 0 ? S 17:23 0:00 [jbd2/sda1-8]
root 228 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-ext4-rsv-conversion]
root 269 0.0 1.1 51284 22432 ? Ss 17:23 0:00 /usr/lib/systemd/systemd-journald
systemd+ 317 0.0 0.7 23536 14764 ? Ss 17:23 0:00 /usr/lib/systemd/systemd-resolved
systemd+ 318 0.0 0.4 92244 8520 ? Ssl 17:23 0:00 /usr/lib/systemd/systemd-timesyncd
root 324 0.0 0.5 35252 10132 ? Ss 17:23 0:00 /usr/lib/systemd/systemd-udevd
root 332 0.0 0.0 0 0 ? S 17:23 0:00 [psimon]
root 385 0.0 0.0 0 0 ? S 17:23 0:00 [irq/18-vmwgfx]
root 386 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-ttm]
root 413 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-cryptd]
message+ 644 0.0 0.2 8484 5064 ? Ss 17:23 0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
root 646 0.4 0.0 0 0 ? I 17:23 1:24 [kworker/1:3-events]
root 660 0.0 0.1 6864 2848 ? Ss 17:23 0:00 /usr/sbin/cron -f
root 662 0.0 0.4 19004 9236 ? Ss 17:23 0:00 /usr/lib/systemd/systemd-logind
root 825 0.0 0.2 11540 4140 ? Ss 17:23 0:00 /usr/sbin/vsftpd /etc/vsftpd.conf
root 827 0.0 0.3 11768 7952 ? Ss 17:23 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root 834 0.0 0.3 9868 6312 ? Ss 17:23 0:00 login -- londonlogin
root 864 0.0 0.0 0 0 ? I< 17:23 0:00 [kworker/R-cfg80211]
root 869 0.0 1.1 240916 23188 ? Ss 17:23 0:02 /usr/sbin/apache2 -k start
www-data 872 0.0 0.5 241632 12020 ? S 17:23 0:00 /usr/sbin/apache2 -k start
www-data 873 0.0 0.5 241632 12020 ? S 17:23 0:00 /usr/sbin/apache2 -k start
www-data 874 0.0 0.5 241632 12020 ? S 17:23 0:00 /usr/sbin/apache2 -k start
www-data 875 0.0 0.5 241632 12020 ? S 17:23 0:00 /usr/sbin/apache2 -k start
www-data 876 0.0 0.5 241632 12020 ? S 17:23 0:00 /usr/sbin/apache2 -k start
root 1019 0.0 0.0 0 0 ? I 17:47 0:00 [kworker/u10:2-ext4-rsv-conversion]
root 1021 0.0 0.0 0 0 ? I 18:02 0:00 [kworker/u9:1-events_unbound]
root 1030 0.0 0.0 0 0 ? S 18:02 0:00 [psimon]
londonl+ 1032 0.0 0.6 21980 12184 ? Ss 18:02 0:00 /usr/lib/systemd/systemd --user
root 1033 0.0 0.0 0 0 ? I 18:02 0:00 [kworker/0:0-rcu_gp]
londonl+ 1035 0.0 0.1 24888 3848 ? S 18:02 0:00 (sd-pam)
londonl+ 1045 0.0 0.3 9224 6144 tty1 Ss+ 18:02 0:01 -bash
root 1167 0.0 0.0 0 0 ? I 18:39 0:00 [kworker/u10:0-flush-8:0]
root 1535 0.0 0.0 0 0 ? I 21:22 0:00 [kworker/u10:3-writeback]
root 1588 0.0 0.0 0 0 ? I 21:39 0:00 [kworker/0:1-cgroup_destroy]
root 1590 0.0 0.0 0 0 ? I< 21:50 0:00 [kworker/1:1H-kblockd]
root 1688 0.3 0.0 0 0 ? I 22:22 0:01 [kworker/1:1-cgroup_destroy]
root 1853 0.0 0.0 0 0 ? I 22:27 0:00 [kworker/0:2-events]
root 1864 0.0 0.0 0 0 ? I 22:27 0:00 [kworker/u9:3-events_unbound]
root 1876 0.0 0.0 0 0 ? I 22:27 0:00 [kworker/1:0-cgroup_destroy]
root 2015 0.0 0.3 18120 7908 ? Ss 22:29 0:00 /usr/lib/systemd/systemd-timedated
root 2286 0.0 0.0 0 0 ? I 22:29 0:00 [kworker/u10:1-events_unbound]
root 3162 0.2 0.6 20032 13132 ? Ss 22:30 0:00 sshd-session: londonlogin [priv]
root 3163 0.4 0.6 20032 13164 ? Ss 22:30 0:00 sshd-session: londonlogin [priv]
root 3181 1.9 0.6 20032 13124 ? Ss 22:30 0:00 sshd-session: londonlogin [priv]
root 3186 4.1 0.6 20032 13028 ? Ss 22:30 0:00 sshd-session: londonlogin [priv]
londonl+ 3206 4.5 0.4 20420 8240 ? S 22:30 0:00 sshd-session: londonlogin@pts/0
londonl+ 3212 0.0 0.4 20420 8272 ? S 22:30 0:00 sshd-session: londonlogin@pts/1
londonl+ 3214 0.0 0.4 20420 8244 ? S 22:30 0:00 sshd-session: londonlogin@pts/2
londonl+ 3215 0.0 0.4 20420 8252 ? S 22:30 0:00 sshd-session: londonlogin@pts/3
londonl+ 3216 11.7 0.2 9024 5900 pts/0 Ss+ 22:30 0:00 -bash
londonl+ 3219 20.0 0.2 9024 5952 pts/2 Ss 22:30 0:00 -bash
londonl+ 3220 20.0 0.2 9024 5896 pts/1 Ss 22:30 0:00 -bash
londonl+ 3225 16.6 0.2 9024 5928 pts/3 Ss+ 22:30 0:00 -bash
root 3235 0.0 0.3 19012 7800 pts/1 S+ 22:30 0:00 sudo -u londonlogin -p Password: sh -c printf "command_start_%s" "tBY9qtiW"; /bin/ps auxww 2>/dev/null; printf "command_done_%s" "1yUKMpPa"
root 3243 0.0 0.1 19012 2784 pts/6 Ss 22:30 0:00 sudo -u londonlogin -p Password: sh -c printf "command_start_%s" "tBY9qtiW"; /bin/ps auxww 2>/dev/null; printf "command_done_%s" "1yUKMpPa"
londonl+ 3244 0.0 0.0 2680 1848 pts/6 S+ 22:30 0:00 sh -c printf "command_start_%s" "tBY9qtiW"; /bin/ps auxww 2>/dev/null; printf "command_done_%s" "1yUKMpPa"
londonl+ 3246 100 0.1 6404 3776 pts/6 R+ 22:30 0:00 /bin/ps auxww
root 3247 100 0.3 18308 7464 pts/2 R+ 22:30 0:00 sudo -u londonlogin -p Password: sh -c printf "command_start_%s" "QInG1zCV"; cat /etc/shadow; printf "command_done_%s" "CfEfdqsD"

Nessus was able to log in to the remote host using the provided credentials, but encountered difficulty running commands used to find unmanaged software.

Nessus found problems running commands on the target host which are used to find software that is not managed by the operating system.
Details of the issues encountered are reported by this plugin.

Failure to properly execute commands used to find and characterize unmanaged software on the target host can lead to scans that do not report known vulnerabilities. There may be little in the scan results of unmanaged software plugins to indicate the missing availability of the source commands except audit trail messages.

Commands used to find unmanaged software installations might fail for a variety of reasons, including:

* Inadequate scan user permissions,
* Failed privilege escalation,
* Intermittent network disruption, or
* Missing or corrupt executables on the target host.

Please address the issues reported here and redo the scan.

n/a

None

Published: 2021/08/23, Modified: 2021/08/23

Failures in commands used to assess Unix software:

unzip -v :
sh: 1: unzip: not found


Account : londonlogin
Protocol : SSH

Vim is installed on the remote Linux host.

Vim is installed on the remote Linux host.

n/a

None

Published: 2024/01/29, Modified: 2026/01/07

Path : /usr/bin/vim.tiny
Version : 9.1

libcurl is installed on the remote Linux / Unix host.

libcurl is installed on the remote Linux / Unix host.

Additional information:

- More paths will be searched and the timeout for the search will be increased if 'Perform thorough tests' setting is enabled.

- The plugin timeout can be set to a custom value other than the plugin's default of 30 minutes via the 'timeout.182848' scanner setting in Nessus 8.15.1 or later.

Please see https://docs.tenable.com/nessus/Content/SettingsAdvanced.htm#Custom for more information.

n/a

None

Published: 2023/10/10, Modified: 2026/01/07

Path : /usr/lib/x86_64-linux-gnu/libcurl.so.4.8.0
Version : 8.14.1
Associated Package : libcurl4t64

The remote Debian host is missing a security-related update.

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6023 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6023-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff October 10, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : tiff CVE ID : CVE-2025-9900

It was discovered that missing input sanitising in the libtiff library could result in denial of service or potentially the execution of arbitrary code if malformed image files are processed.

For the oldstable distribution (bookworm), this problem has been fixed in version 4.5.0-6+deb12u3.

For the stable distribution (trixie), this problem has been fixed in version 4.7.0-3+deb13u1.

We recommend that you upgrade your tiff packages.

For the detailed security status of tiff please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/tiff

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade the libtiff-dev packages.

Critical

8.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

7.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0005

10.0 (CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

7.4 (CVSS2#E:U/RL:OF/RC:C)

Published: 2025/10/10, Modified: 2025/10/10

Remote package installed : libtiff6_4.7.0-3
Should be : libtiff6_4.7.0-3+deb13u1

The remote Debian host is missing one or more security-related updates.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6015 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6015-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso October 01, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : openssl CVE ID : CVE-2025-9230 CVE-2025-9231 CVE-2025-9232

Multiple vulnerabilities have been discovered in OpenSSL, a Secure Sockets Layer toolkit, which may result in denial of service or information leaks.

Additional details can be found in the upstream advisory:
https://openssl-library.org/news/secadv/20250930.txt

For the oldstable distribution (bookworm), these problems have been fixed in version 3.0.17-1~deb12u3.

For the stable distribution (trixie), these problems have been fixed in version 3.5.1-1+deb13u1.

We recommend that you upgrade your openssl packages.

For the detailed security status of openssl please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/openssl

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade the libcrypto3-udeb packages.

High

6.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L)

5.7 (CVSS:3.0/E:U/RL:O/RC:C)

0.0003

7.1 (CVSS2#AV:N/AC:H/Au:S/C:C/I:C/A:C)

5.3 (CVSS2#E:U/RL:OF/RC:C)

Published: 2025/10/01, Modified: 2025/10/01

Remote package installed : libssl3t64_3.5.1-1
Should be : libssl3t64_3.5.1-1+deb13u1
Remote package installed : openssl_3.5.1-1
Should be : openssl_3.5.1-1+deb13u1
Remote package installed : openssl-provider-legacy_3.5.1-1
Should be : openssl-provider-legacy_3.5.1-1+deb13u1

The remote Debian host is missing one or more security-related updates.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6033 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6033-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff October 23, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : bind9 CVE ID : CVE-2025-8677 CVE-2025-40778 CVE-2025-40780

Several vulnerabilities were discovered in BIND, a DNS server implementation, which may result in cache poisoning or denial of service.

For the oldstable distribution (bookworm), these problems have been fixed in version 1:9.18.41-1~deb12u1.

For the stable distribution (trixie), these problems have been fixed in version 1:9.20.15-1~deb13u1.

We recommend that you upgrade your bind9 packages.

For the detailed security status of bind9 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/bind9

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade the bind9 packages.

High

8.6 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)

7.5 (CVSS:3.0/E:U/RL:O/RC:C)

0.0003

7.8 (CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:N)

5.8 (CVSS2#E:U/RL:OF/RC:C)

I

Published: 2025/10/24, Modified: 2025/10/24

Remote package installed : bind9-dnsutils_1:9.20.11-4
Should be : bind9-dnsutils_1:9.20.15-1~deb13u1
Remote package installed : bind9-host_1:9.20.11-4
Should be : bind9-host_1:9.20.15-1~deb13u1
Remote package installed : bind9-libs_1:9.20.11-4
Should be : bind9-libs_1:9.20.15-1~deb13u1

The remote Debian host is missing one or more security-related updates.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6076 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6076-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso December 10, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : libpng1.6 CVE ID : CVE-2025-64505 CVE-2025-64506 CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 Debian Bug : 1121216 1121217 1121218 1121219 1121877

Several vulnerabilities were reported in the libpng PNG library, which could lead to information leaks, denial of service or potentially the execution of arbitrary code if a specially crafted image is processed.

For the oldstable distribution (bookworm), these problems have been fixed in version 1.6.39-2+deb12u1.

For the stable distribution (trixie), these problems have been fixed in version 1.6.48-1+deb13u1.

We recommend that you upgrade your libpng1.6 packages.

For the detailed security status of libpng1.6 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/libpng1.6

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade the libpng-dev packages.

High

7.1 (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)

6.4 (CVSS:3.0/E:P/RL:O/RC:C)

0.0004

8.5 (CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:C)

6.7 (CVSS2#E:POC/RL:OF/RC:C)

I

Published: 2025/12/10, Modified: 2025/12/12

Remote package installed : libpng16-16t64_1.6.48-1
Should be : libpng16-16t64_1.6.48-1+deb13u1

The remote Debian host is missing one or more security-related updates.

The remote Debian 12 / 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6030 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6030-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso October 22, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : intel-microcode CVE ID : CVE-2025-20053 CVE-2025-20109 CVE-2025-21090 CVE-2025-22839 CVE-2025-22840 CVE-2025-22889 CVE-2025-24305 CVE-2025-26403 CVE-2025-32086 Debian Bug : 1110983

This update ships updated CPU microcode for some types of Intel CPUs and provides mitigations for security vulnerabilities which could result in privilege escalation or denial of service.

For the oldstable distribution (bookworm), these problems have been fixed in version 3.20250812.1~deb12u1.

For the stable distribution (trixie), these problems have been fixed in version 3.20250812.1~deb13u1.

We recommend that you upgrade your intel-microcode packages.

For the detailed security status of intel-microcode please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/intel-microcode

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade the intel-microcode packages.

Medium

7.3 (CVSS:4.0/AV:A/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N)

7.9 (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N)

6.9 (CVSS:3.0/E:U/RL:O/RC:C)

0.0002

6.0 (CVSS2#AV:L/AC:H/Au:S/C:C/I:C/A:C)

4.4 (CVSS2#E:U/RL:OF/RC:C)

Published: 2025/10/22, Modified: 2025/10/22

Remote package installed : intel-microcode_3.20250512.1
Should be : intel-microcode_3.20250812.1~deb13u1

The remote Debian host is missing a security-related update.

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6084 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6084-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso December 18, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : c-ares CVE ID : CVE-2025-62408

It was discovered that c-ares, a library that performs DNS requests and name resolution asynchronously, does not properly handle termination of queries which may result in denial of service.

For the stable distribution (trixie), this problem has been fixed in version 1.34.5-1+deb13u1.

We recommend that you upgrade your c-ares packages.

For the detailed security status of c-ares please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/c-ares

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade the libc-ares-dev packages.

Medium

5.9 (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)

5.2 (CVSS:3.0/E:U/RL:O/RC:C)

0.0004

5.4 (CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:C)

4.0 (CVSS2#E:U/RL:OF/RC:C)

Published: 2025/12/18, Modified: 2025/12/18

Remote package installed : libcares2_1.34.5-1
Should be : libcares2_1.34.5-1+deb13u1

The remote Debian host is missing one or more security-related updates.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6088 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6088-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff December 21, 2025 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : php8.4 CVE ID : CVE-2025-14177 CVE-2025-14178 CVE-2025-14180

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service or memory disclosure.

For the stable distribution (trixie), these problems have been fixed in version 8.4.16-1~deb13u1.

We recommend that you upgrade your php8.4 packages.

For the detailed security status of php8.4 please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/php8.4

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Upgrade the libapache2-mod-php8.4 packages.

Medium

7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

6.5 (CVSS:3.0/E:U/RL:O/RC:C)

0.0004

5.0 (CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P)

3.7 (CVSS2#E:U/RL:OF/RC:C)

Published: 2025/12/21, Modified: 2025/12/21

Remote package installed : libapache2-mod-php8.4_8.4.11-1
Should be : libapache2-mod-php8.4_8.4.16-1~deb13u1
Remote package installed : php8.4_8.4.11-1
Should be : php8.4_8.4.16-1~deb13u1
Remote package installed : php8.4-cli_8.4.11-1
Should be : php8.4-cli_8.4.16-1~deb13u1
Remote package installed : php8.4-common_8.4.11-1
Should be : php8.4-common_8.4.16-1~deb13u1
Remote package installed : php8.4-opcache_8.4.11-1
Should be : php8.4-opcache_8.4.16-1~deb13u1
Remote package installed : php8.4-readline_8.4.11-1
Should be : php8.4-readline_8.4.16-1~deb13u1

The remote Debian host is missing a security-related update.

The remote Debian 12 / 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6094 advisory.

- ------------------------------------------------------------------------- Debian Security Advisory DSA-6094-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff January 05, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package : libsodium CVE ID : CVE-2025-69277

It was discovered that the crypto_core_ed25519_is_valid_point() function of the Sodium cryptography library mishandled checks for valid elliptic curve points.

For the oldstable distribution (bookworm), this problem has been fixed in version 1.0.18-1+deb12u1.

For the stable distribution (trixie), this problem has been fixed in version 1.0.18-1+deb13u1.

We recommend that you upgrade your libsodium packages.

For the detailed security status of libsodium please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/libsodium

Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade the libsodium-dev packages.

Low

4.5 (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N)

3.9 (CVSS:3.0/E:U/RL:O/RC:C)

0.0001

2.6 (CVSS2#AV:L/AC:H/Au:N/C:P/I:P/A:N)

1.9 (CVSS2#E:U/RL:OF/RC:C)

II

Published: 2026/01/05, Modified: 2026/01/09

Remote package installed : libsodium23_1.0.18-1+b2
Should be : libsodium23_1.0.18-1+deb13u1

The SSH server running on the remote host is affected by multiple vulnerabilities.

The version of OpenSSH installed on the remote host is prior to 10.1. It is, therefore, affected by multiple vulnerabilities:

- ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.) (CVE-2025-61984)

- ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used. (CVE-2025-61985)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Upgrade to OpenSSH version 10.1/10.1p1 or later.

Low

3.6 (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)

0.0001

2.4 (CVSS2#AV:L/AC:H/Au:S/C:P/I:P/A:N)

II

Published: 2025/10/10, Modified: 2025/11/18

Version source : SSH-2.0-OpenSSH_10.0p2 Debian-7
Installed version : 10.0p2
Fixed version : 10.1 / 10.1.p1

The remote host has Apache HTTP Server software installed.

Apache HTTP Server is installed on the remote Linux host.

n/a

None

Published: 2020/10/12, Modified: 2026/01/07

Path : /usr/sbin/apache2
Version : 2.4.65
Associated Package : apache2-bin: /usr/sbin/apache2
Managed by OS : True
Running : yes

Configs found :
- /etc/apache2/apache2.conf

Loaded modules :
- libphp8.4
- mod_access_compat
- mod_alias
- mod_auth_basic
- mod_authn_core
- mod_authn_file
- mod_authz_core
- mod_authz_host
- mod_authz_user
- mod_autoindex
- mod_cgi
- mod_deflate
- mod_dir
- mod_env
- mod_filter
- mod_mime
- mod_mpm_prefork
- mod_negotiation
- mod_reqtimeout
- mod_setenvif
- mod_status

The remote host is hosting websites using Apache HTTP Server.

Domain names and IP addresses from Apache HTTP Server configuration file were retrieved from the remote host. Apache HTTP Server is a webserver environment written in C. Note: Only Linux- and Unix-based hosts are currently supported by this plugin.

n/a

None

Published: 2020/11/09, Modified: 2026/01/05

Sites and configs present in /usr/sbin/apache2 Apache installation:
- following sites are present in /etc/apache2/apache2.conf Apache config file:
+ () - *:80

Apache Log4j, a logging API, is installed on the remote Linux / Unix host.

One or more instances of Apache Log4j, a logging API, are installed on the remote Linux / Unix Host.

The plugin timeout can be set to a custom value other than the plugin's default of 45 minutes via the 'timeout.156000' scanner setting in Nessus 8.15.1 or later.

Note, this plugin runs certain commands differently if the scan is configured to use the 'Attempt Least Privilege' option. If enabled, scan times are expected to increase, especially on hosts with many files.

Please see https://docs.tenable.com/nessus/Content/SettingsAdvanced.htm#Custom for more information.

n/a

None

Published: 2021/12/10, Modified: 2026/01/07

Path : /usr/share/java/libintl-0.23.1.jar
Version : unknown
JMSAppender.class association : Not Found
JdbcAppender.class association : Not Found
JndiLookup.class association : Not Found
Method : Embedded string inspection


Note: Jar file inspection cannot be performed. No results or cannot list archive contents. If results are present, install an unzip package to resolve this problem.

BIOS info could be read.

Using SMBIOS and UEFI, it was possible to get BIOS info.

N/A

None

Published: 2008/09/08, Modified: 2024/02/12

Version : 1.2
Vendor : innotek GmbH
Release Date : 12/01/2006
Secure boot : disabled

It was possible to enumerate CPE names that matched on the remote system.

By using information obtained from a Nessus scan, this plugin reports CPE (Common Platform Enumeration) matches for various hardware and software products found on a host.

Note that if an official CPE is not available for the product, this plugin computes the best possible CPE based on the information available from the scan.

n/a

None

Published: 2010/04/21, Modified: 2026/01/05

The remote operating system matched the following CPE :

cpe:/o:debian:debian_linux:13 -> Debian Linux

Following application CPE's matched on the remote system :

cpe:/a:apache:http_server:2.4.65 -> Apache Software Foundation Apache HTTP Server
cpe:/a:apache:log4j -> Apache Software Foundation log4j
cpe:/a:gnupg:libgcrypt:1.11.0 -> GnuPG Libgcrypt
cpe:/a:haxx:curl:8.14.1 -> Haxx Curl
cpe:/a:haxx:libcurl:8.14.1 -> Haxx libcurl
cpe:/a:ibm:qradar:cat%3a_%2fetc%2f.qradar_install_version%3a_no_such_file_or_directory
cpe:/a:openbsd:openssh:10.0p2 -> OpenBSD OpenSSH
cpe:/a:openssl:openssl:3.5.1 -> OpenSSL Project OpenSSL
cpe:/a:php:php:8.4.11 -> PHP PHP
cpe:/a:tukaani:xz:5.8.1 -> Tukaani XZ
cpe:/a:vim:vim:9.1 -> Vim

Curl is installed on the remote Linux / Unix host.

Curl (also known as curl and cURL) is installed on the remote Linux / Unix host.

Additional information:

- More paths will be searched and the timeout for the search will be increased if 'Perform thorough tests' setting is enabled.

- The plugin timeout can be set to a custom value other than the plugin's default of 30 minutes via the 'timeout.182774' scanner setting in Nessus 8.15.1 or later.

Please see https://docs.tenable.com/nessus/Content/SettingsAdvanced.htm#Custom for more information.

n/a

None

Published: 2023/10/09, Modified: 2026/01/07

Path : /usr/bin/curl
Version : 8.14.1
Associated Package : curl 8.14.1-2
Managed by OS : True

It was possible to determine the remote system hostname.

This plugin reports a device's hostname collected via SSH or WMI.

n/a

None

Published: 2011/06/30, Modified: 2026/01/07

Hostname : L-CD
L-CD (hostname command)

It is possible to guess the remote device type.

Based on the remote operating system, it is possible to determine what the remote system type is (eg: a printer, router, general-purpose computer, etc).

n/a

None

Published: 2011/05/23, Modified: 2025/03/12

Remote device type : general-purpose
Confidence level : 100

Nessus was able to enumerate the IPv4 interfaces on the remote host.

Nessus was able to enumerate the network interfaces configured with IPv4 addresses by connecting to the remote host via SSH using the supplied credentials.

Disable any unused IPv4 interfaces.

None

Published: 2007/05/11, Modified: 2025/09/24

The following IPv4 addresses are set on the remote host :

- 127.0.0.1 (on interface lo)
- 10.0.2.15 (on interface enp0s3)
- 20.0.0.2 (on interface enp0s9)
- 192.168.2.1 (on interface enp0s10)

Nessus was able to enumerate the IPv6 interfaces on the remote host.

Nessus was able to enumerate the network interfaces configured with IPv6 addresses by connecting to the remote host via SSH using the supplied credentials.

Disable IPv6 if you are not actually using it. Otherwise, disable any unused IPv6 interfaces.

None

Published: 2007/05/11, Modified: 2025/09/24

The following IPv6 interfaces are set on the remote host :

- ::1 (on interface lo)
- fd17:625c:f037:2:afbf:4273:f1dc:9d26 (on interface enp0s3)
- fe80::3675:9a74:c357:ee97 (on interface enp0s3)
- fe80::a00:27ff:fefc:8edc (on interface enp0s9)
- fe80::a00:27ff:fe34:1015 (on interface enp0s10)

Nessus was able to enumerate MAC addresses on the remote host.

Nessus was able to enumerate MAC addresses by connecting to the remote host via SSH with the supplied credentials.

Disable any unused interfaces.

None

Published: 2008/06/30, Modified: 2022/12/20

The following MAC addresses exist on the remote host :

- 08:00:27:fc:8e:dc (interface enp0s9)
- 08:00:27:27:68:c3 (interface enp0s3)
- 08:00:27:34:10:15 (interface enp0s10)

Nessus was able to parse the Network Interface data on the remote host.

Nessus was able to parse the Network Interface data on the remote host.

n/a

None

Published: 2023/01/19, Modified: 2025/02/11

enp0s10:
MAC : 08:00:27:34:10:15
IPv4:
- Address : 192.168.2.1
Netmask : 255.255.255.0
Broadcast : 192.168.2.255
IPv6:
- Address : fe80::a00:27ff:fe34:1015
Prefixlen : 64
Scope : link
lo:
IPv4:
- Address : 127.0.0.1
Netmask : 255.0.0.0
IPv6:
- Address : ::1
Prefixlen : 128
Scope : host
enp0s9:
MAC : 08:00:27:fc:8e:dc
IPv4:
- Address : 20.0.0.2
Netmask : 255.255.255.252
Broadcast : 20.0.0.3
IPv6:
- Address : fe80::a00:27ff:fefc:8edc
Prefixlen : 64
Scope : link
enp0s3:
MAC : 08:00:27:27:68:c3
IPv4:
- Address : 10.0.2.15
Netmask : 255.255.255.0
Broadcast : 10.0.2.255
IPv6:
- Address : fd17:625c:f037:2:afbf:4273:f1dc:9d26
Prefixlen : 64
Scope : global
- Address : fe80::3675:9a74:c357:ee97
Prefixlen : 64
Scope : link

Nessus was able to retrieve network routing information from the remote host.

Nessus was able to retrieve network routing information the remote host.

n/a

None

Published: 2023/08/02, Modified: 2023/08/02

Gateway Routes:
enp0s3:
ipv4_gateways:
10.0.2.2:
subnets:
- 0.0.0.0/0
ipv6_gateways:
fe80::2:
subnets:
- ::/0
enp0s9:
ipv4_gateways:
20.0.0.1:
subnets:
- 192.168.1.0/24
Interface Routes:
enp0s10:
ipv4_subnets:
- 192.168.2.0/24
ipv6_subnets:
- fe80::/64
enp0s3:
ipv4_subnets:
- 10.0.2.0/24
ipv6_subnets:
- fd17:625c:f037:2::/64
- fe80::/64
enp0s9:
ipv4_subnets:
- 20.0.0.0/30
ipv6_subnets:
- fe80::/64

Enumerates the PATH variable of the current scan user.

Enumerates the PATH variables of the current scan user.

Ensure that directories listed here are in line with corporate policy.

None

Published: 2022/12/21, Modified: 2026/01/07

Nessus has enumerated the path of the current scan user :

/usr/local/sbin
/usr/local/bin
/usr/sbin
/usr/bin
/sbin
/bin

The manufacturer can be identified from the Ethernet OUI.

Each ethernet MAC address starts with a 24-bit Organizationally Unique Identifier (OUI). These OUIs are registered by IEEE.

n/a

None

Published: 2009/02/19, Modified: 2020/05/13

The following card manufacturers were identified :

08:00:27:FC:8E:DC : PCS Systemtechnik GmbH
08:00:27:27:68:C3 : PCS Systemtechnik GmbH
08:00:27:34:10:15 : PCS Systemtechnik GmbH

This plugin gathers MAC addresses from various sources and consolidates them into a list.

This plugin gathers MAC addresses discovered from both remote probing of the host (e.g. SNMP and Netbios) and from running local checks (e.g. ifconfig). It then consolidates the MAC addresses into a single, unique, and uniform list.

n/a

None

Published: 2015/10/16, Modified: 2025/06/10

The following is a consolidated list of detected MAC addresses:
- 08:00:27:FC:8E:DC
- 08:00:27:27:68:C3
- 08:00:27:34:10:15

IBM QRadar was detected on the remote host.

Version information for the IBM QRadar appliance was detected on the remote host.

n/a

None

Published: 2026/01/09, Modified: 2026/01/09

Path : /opt/qradar
Version : cat: /etc/.qradar_install_version: No such file or directory

Enumerates the IP address assignment method(static/dynamic).

Enumerates the IP address assignment method(static/dynamic).

n/a

None

Published: 2023/02/14, Modified: 2026/01/07

+ lo
+ IPv4
- Address : 127.0.0.1
Assign Method : static
+ IPv6
- Address : ::1
Assign Method : static
+ enp0s3
+ IPv4
- Address : 10.0.2.15
Assign Method : dynamic
+ IPv6
- Address : fd17:625c:f037:2:afbf:4273:f1dc:9d26
Assign Method : dynamic
- Address : fe80::3675:9a74:c357:ee97
Assign Method : static
+ enp0s9
+ IPv4
- Address : 20.0.0.2
Assign Method : static
+ IPv6
- Address : fe80::a00:27ff:fefc:8edc
Assign Method : static
+ enp0s10
+ IPv4
- Address : 192.168.2.1
Assign Method : static
+ IPv6
- Address : fe80::a00:27ff:fe34:1015
Assign Method : static

Libgcrypt is installed on this host.

Libgcrypt, a cryptography library, was found on the remote host.

n/a

None

Published: 2021/07/21, Modified: 2026/01/07

Nessus detected 4 installs of Libgcrypt:

Path : /usr/lib/x86_64-linux-gnu/libgcrypt.so.20
Version : 1.11.0

Path : /usr/lib/x86_64-linux-gnu/libgcrypt.so.20.5.0
Version : 1.11.0

Path : /lib/x86_64-linux-gnu/libgcrypt.so.20
Version : 1.11.0

Path : /lib/x86_64-linux-gnu/libgcrypt.so.20.5.0
Version : 1.11.0

Use system commands to obtain the list of mounted devices on the target machine at scan time.

Report the mounted devices information on the target machine at scan time using the following commands.
/bin/df -h /bin/lsblk /bin/mount -l

This plugin only reports on the tools available on the system and omits any tool that did not return information when the command was ran.

n/a

None

Published: 2022/02/03, Modified: 2023/11/27

$ df -h
Filesystem Size Used Avail Use% Mounted on
udev 960M 0 960M 0% /dev
tmpfs 198M 628K 197M 1% /run
/dev/sda1 19G 1.7G 16G 10% /
tmpfs 987M 0 987M 0% /dev/shm
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-journald.service
tmpfs 1.0M 0 1.0M 0% /run/credentials/systemd-resolved.service
tmpfs 987M 0 987M 0% /tmp
tmpfs 1.0M 0 1.0M 0% /run/credentials/getty@tty1.service
tmpfs 198M 8.0K 198M 1% /run/user/1000


$ lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS
sda 8:0 0 20G 0 disk
|-sda1 8:1 0 18.9G 0 part /
|-sda2 8:2 0 1K 0 part
`-sda5 8:5 0 1.1G 0 part [SWAP]


$ mount -l
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime)
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
udev on /dev type devtmpfs (rw,nosuid,relatime,size=982920k,nr_inodes=245730,mode=755,inode64)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=600,ptmxmode=000)
tmpfs on /run type tmpfs (rw,nosuid,nodev,noexec,relatime,size=202104k,mode=755,inode64)
/dev/sda1 on / type ext4 (rw,relatime,errors=remount-ro)
securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime)
tmpfs on /dev/shm type tmpfs (rw,nosuid,nodev,inode64)
cgroup2 on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,relatime,nsdelegate,memory_recursiveprot)
pstore on /sys/fs/pstore type pstore (rw,nosuid,nodev,noexec,relatime)
bpf on /sys/fs/bpf type bpf (rw,nosuid,nodev,noexec,relatime,mode=700)
systemd-1 on /proc/sys/fs/binfmt_misc type autofs (rw,relatime,fd=41,pgrp=1,timeout=0,minproto=5,maxproto=5,direct,pipe_ino=2950)
mqueue on /dev/mqueue type mqueue (rw,nosuid,nodev,noexec,relatime)
hugetlbfs on /dev/hugepages type hugetlbfs (rw,nosuid,nodev,relatime,pagesize=2M)
tmpfs on /run/lock type tmpfs (rw,nosuid,nodev,noexec,relatime,size=5120k,inode64)
debugfs on /sys/kernel/debug type debugfs (rw,nosuid,nodev,noexec,relatime)
tracefs on /sys/kernel/tracing type tracefs (rw,nosuid,nodev,noexec,relatime)
tmpfs on /run/credentials/systemd-journald.service type tmpfs (ro,nosuid,nodev,noexec,relatime,nosymfollow,size=1024k,nr_inodes=1024,mode=700,inode64,noswap)
configfs on /sys/kernel/config type configfs (rw,nosuid,nodev,noexec,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,nosuid,nodev,noexec,relatime)
tmpfs on /run/credentials/systemd-resolved.service type tmpfs (ro,nosuid,nodev,noexec,relatime,nosymfollow,size=1024k,nr_inodes=1024,mode=700,inode64,noswap)
tmpfs on /tmp type tmpfs (rw,nosuid,nodev,nr_inodes=1048576,inode64)
binfmt_misc on /proc/sys/fs/binfmt_misc type binfmt_misc (rw,nosuid,nodev,noexec,relatime)
tmpfs on /run/credentials/getty@tty1.service type tmpfs (ro,nosuid,nodev,noexec,relatime,nosymfollow,size=1024k,nr_inodes=1024,mode=700,inode64,noswap)
tmpfs on /run/user/1000 type tmpfs (rw,nosuid,nodev,relatime,size=202100k,nr_inodes=50525,mode=700,uid=1000,gid=1000,inode64)

Nessus was able to collect and report time zone information from the remote host.

Nessus was able to collect time zone information from the remote Linux host.

None

None

Published: 2024/04/10, Modified: 2024/04/10

Via date: GMT +0000
Via timedatectl: Time zone: Europe/London (GMT, +0000)
Via /etc/localtime: GMT0BST,M3.5.0/1,M10.5.0

Nessus was able to enumerate local users and groups on the remote Linux host.

Using the supplied credentials, Nessus was able to enumerate the local users and groups on the remote Linux host.

None

None

Published: 2016/12/19, Modified: 2025/03/26

-----------[ User Accounts ]-----------

User : londonlogin
Home folder : /home/londonlogin
Start script : /bin/bash
Groups : dip
netdev
users
video
londonlogin
cdrom
audio
sudo
plugdev
floppy

----------[ System Accounts ]----------

User : root
Home folder : /root
Start script : /bin/bash
Groups : root

User : daemon
Home folder : /usr/sbin
Start script : /usr/sbin/nologin
Groups : daemon

User : bin
Home folder : /bin
Start script : /usr/sbin/nologin
Groups : bin

User : sys
Home folder : /dev
Start script : /usr/sbin/nologin
Groups : sys

User : sync
Home folder : /bin
Start script : /bin/sync
Groups : nogroup

User : games
Home folder : /usr/games
Start script : /usr/sbin/nologin
Groups : games

User : man
Home folder : /var/cache/man
Start script : /usr/sbin/nologin
Groups : man

User : lp
Home folder : /var/spool/lpd
Start script : /usr/sbin/nologin
Groups : lp

User : mail
Home folder : /var/mail
Start script : /usr/sbin/nologin
Groups : mail

User : news
Home folder : /var/spool/news
Start script : /usr/sbin/nologin
Groups : news

User : uucp
Home folder : /var/spool/uucp
Start script : /usr/sbin/nologin
Groups : uucp

User : proxy
Home folder : /bin
Start script : /usr/sbin/nologin
Groups : proxy

User : www-data
Home folder : /var/www
Start script : /usr/sbin/nologin
Groups : www-data

User : backup
Home folder : /var/backups
Start script : /usr/sbin/nologin
Groups : backup

User : list
Home folder : /var/list
Start script : /usr/sbin/nologin
Groups : list

User : irc
Home folder : /run/ircd
Start script : /usr/sbin/nologin
Groups : irc

User : _apt
Home folder : /nonexistent
Start script : /usr/sbin/nologin
Groups : nogroup

User : nobody
Home folder : /nonexistent
Start script : /usr/sbin/nologin
Groups : nogroup

User : systemd-network
Home folder : /
Start script : /usr/sbin/nologin
Groups : systemd-network

User : dhcpcd
Home folder : /usr/lib/dhcpcd
Start script : /bin/false
Groups : nogroup

User : systemd-timesync
Home folder : /
Start script : /usr/sbin/nologin
Groups : systemd-timesync

User : messagebus
Home folder : /nonexistent
Start script : /usr/sbin/nologin
Groups : messagebus

User : sshd
Home folder : /run/sshd
Start script : /usr/sbin/nologin
Groups : nogroup

User : ftp
Home folder : /srv/ftp
Start script : /usr/sbin/nologin
Groups : ftp

User : sssd
Home folder : /var/lib/sss
Start script : /usr/sbin/nologin
Groups : sssd

User : polkitd
Home folder : /
Start script : /usr/sbin/nologin
Groups : polkitd

User : systemd-resolve
Home folder : /
Start script : /usr/sbin/nologin
Groups : systemd-resolve


----------[ Domain Accounts ]----------

It is possible to determine which TCP ports are open.

This plugin is a SYN 'half-open' port scanner. It shall be reasonably quick even against a firewalled target.

Note that SYN scans are less intrusive than TCP (full connect) scans against broken services, but they might cause problems for less robust firewalls and also leave unclosed connections on the remote target, if the network is loaded.

Protect your target with an IP filter.

None

Published: 2009/02/04, Modified: 2025/07/14

Port 22/tcp was found to be open

This plugin displays information about the Nessus scan.

This plugin displays, for each tested host, information about the scan itself :

- The version of the plugin set.
- The type of scanner (Nessus or Nessus Home).
- The version of the Nessus Engine.
- The port scanner(s) used.
- The port range scanned.
- The ping round trip time
- Whether credentialed or third-party patch management checks are possible.
- Whether the display of superseded patches is enabled
- The date of the scan.
- The duration of the scan.
- The number of hosts scanned in parallel.
- The number of checks done in parallel.

n/a

None

Published: 2005/08/26, Modified: 2025/10/29

Information about this scan :

Nessus version : 10.11.1
Nessus build : 20021
Plugin feed version : 202601100414
Scanner edition used : Nessus Home
Scanner OS : WINDOWS
Scanner distribution : win-x86-64
Scan type : Normal
Scan name : L-CD - Basic Scan
Scan policy used : Basic Network Scan
Scanner IP : 20.0.0.1
Port scanner(s) : nessus_syn_scanner
Port range : default
Ping RTT : 11.874 ms
Thorough tests : no
Experimental tests : no
Scan for Unpatched Vulnerabilities : no
Plugin debugging enabled : no
Paranoia level : 1
Report verbosity : 1
Safe checks : yes
Optimize the test : yes
Credentialed checks : yes, as 'londonlogin' via ssh
Attempt Least Privilege : no
Patch management checks : None
Display superseded patches : yes (supersedence plugin did not launch)
CGI scanning : disabled
Web application tests : disabled
Max hosts : 30
Max checks : 4
Recv timeout : 5
Backports : None
Allow post-scan editing : Yes
Nessus Plugin Signature Checking : Enabled
Audit File Signature Checking : Disabled
Scan Start Date : 2026/1/10 22:22 GMT Standard Time
Scan duration : 839 sec
Scan for malware : no

Multiple OS fingerprints were detected.

Using a combination of remote probes (TCP/IP, SMB, HTTP, NTP, SNMP, etc), it was possible to gather one or more fingerprints from the remote system. While the highest-confidence result was reported in plugin 11936, “OS Identification”, the complete set of fingerprints detected are reported here.

n/a

None

Published: 2025/02/26, Modified: 2025/03/03

Following OS Fingerprints were found

Remote operating system : Linux Kernel 6.x
Confidence level : 56
Method : MLSinFP
Type : unknown
Fingerprint : unknown

Remote operating system : Linux Kernel 6.12.48+deb13-amd64
Confidence level : 99
Method : uname
Type : general-purpose
Fingerprint : uname:Linux L-CD 6.12.48+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.48-1 (2025-09-20) x86_64 GNU/Linux


Remote operating system : ArubaOS-CX - R9
Cisco Catalyst 9200 Series Switches
Cisco Catalyst 9300 Series Switches
Cisco Catalyst IE9300 Rugged Series
Nutanix
Confidence level : 59
Method : SinFP
Type :
Fingerprint : SinFP:
P1:B10113:F0x12:W64240:O0204ffff:M1460:
P2:B10113:F0x12:W65160:O0204ffff0402080affffffff4445414401030307:M1460:
P3:B00000:F0x00:W0:O0:M0
P4:191601_7_p=22

Remote operating system : Linux Kernel 6.12.48+deb13-amd64 on Debian 13.1
Confidence level : 100
Method : LinuxDistribution
Type : general-purpose
Fingerprint : unknown

Following fingerprints could not be used to determine OS :
SSH:!:SSH-2.0-OpenSSH_10.0p2 Debian-7

It is possible to guess the remote operating system.

Using a combination of remote probes (e.g., TCP/IP, SMB, HTTP, NTP, SNMP, etc.), it is possible to guess the name of the remote operating system in use. It is also possible sometimes to guess the version of the operating system.

n/a

None

Published: 2003/12/09, Modified: 2025/06/03

Remote operating system : Linux Kernel 6.12.48+deb13-amd64 on Debian 13.1
Confidence level : 100
Method : LinuxDistribution


The remote host is running Linux Kernel 6.12.48+deb13-amd64 on Debian 13.1

Information about the remote host can be disclosed via an authenticated session.

Nessus was able to login to the remote host using SSH or local commands and extract the list of installed packages.

n/a

None

Published: 2017/05/30, Modified: 2025/02/11

It was possible to log into the remote host via SSH using 'password' authentication.

The output of "uname -a" is :
Linux L-CD 6.12.48+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.48-1 (2025-09-20) x86_64 GNU/Linux

Local checks have been enabled for this host.
The remote Debian system is :
13.1

OS Security Patch Assessment is available for this host.
Runtime : 15.791867 seconds

Nessus was able to log in to the remote host using the provided credentials and enumerate OS security patch levels.

Nessus was able to determine OS security patch levels by logging into the remote host and running commands to determine the version of the operating system and its components. The remote host was identified as an operating system or device that Nessus supports for patch and update assessment. The necessary information was obtained to perform these checks.

n/a

None

Published: 2018/10/02, Modified: 2021/07/12

OS Security Patch Assessment is available.

Account : londonlogin
Protocol : SSH

An OpenSSH-based SSH server was detected on the remote host.

An OpenSSH-based SSH server was detected on the remote host.

n/a

None

Published: 2023/09/14, Modified: 2026/01/07

Service : ssh
Version : 10.0p2
Banner : SSH-2.0-OpenSSH_10.0p2 Debian-7

OpenSSL was detected on the remote Linux host.

OpenSSL was detected on the remote Linux host.

The plugin timeout can be set to a custom value other than the plugin's default of 15 minutes via the 'timeout.168007' scanner setting in Nessus 8.15.1 or later.

Please see https://docs.tenable.com/nessus/Content/SettingsAdvanced.htm#Custom for more information.

Note: This plugin leverages the '-maxdepth' find command option, which is a feature implemented by the GNU find binary. If the target does not support this option, such as HP-UX and AIX devices, users will need to enable 'thorough tests' in their scan policy to run the find command without using a '-maxdepth' argument.

n/a

None

Published: 2022/11/21, Modified: 2026/01/07

Nessus detected 2 installs of OpenSSL:

Path : /usr/lib/x86_64-linux-gnu/libcrypto.so.3
Version : 3.5.1
Associated Package : libssl3t64

Path : /usr/bin/openssl
Version : 3.5.1
Associated Package : openssl 3.5.1-1
Managed by OS : True

We are unable to retrieve version info from the following list of OpenSSL files. However, these installs may include their version within the filename or the filename of the Associated Package.

e.g. libssl.so.3 (OpenSSL 3.x), libssl.so.1.1 (OpenSSL 1.1.x)

/usr/lib/x86_64-linux-gnu/libssl.so.3

The PHP scripting language is installed on the remote Unix host.

The PHP scripting language is installed on the remote Unix host.

Note: Enabling the 'Perform thorough tests' setting will search the file system much more broadly.
Thorough test is required to get results on hosts running MacOS.

n/a

None

Published: 2024/06/13, Modified: 2026/01/07

Path : /usr/bin/php8.4
Version : 8.4.11
Associated Package : php8.4-cli: /usr/bin/php8.4
INI file : /etc/php/8.4/cli/php.ini
INI source : PHP binary grep
Managed by OS : True

Reports details about packages installed via package managers.

Reports details about packages installed via package managers

n/a

None

Published: 2023/08/01, Modified: 2025/05/07

Successfully retrieved and stored package data.

The remote host is missing several patches.

The remote host is missing one or more security patches. This plugin lists the newest version of each patch to install to make sure the remote host is up-to-date.

Note: Because the 'Show missing patches that have been superseded' setting in your scan policy depends on this plugin, it will always run and cannot be disabled.

Install the patches listed below.

None

Published: 2013/07/08, Modified: 2025/12/15

. You need to take the following 9 actions :


[ Debian dsa-6015 : libcrypto3-udeb - security update (266357) ]

+ Action to take : Upgrade the libcrypto3-udeb packages.

+Impact : Taking this action will resolve 3 different vulnerabilities (CVEs).



[ Debian dsa-6023 : libtiff-dev - security update (270002) ]

+ Action to take : Upgrade the libtiff-dev packages.


[ Debian dsa-6030 : intel-microcode - security update (271205) ]

+ Action to take : Upgrade the intel-microcode packages.

+Impact : Taking this action will resolve 9 different vulnerabilities (CVEs).



[ Debian dsa-6033 : bind9 - security update (271361) ]

+ Action to take : Upgrade the bind9 packages.

+Impact : Taking this action will resolve 3 different vulnerabilities (CVEs).



[ Debian dsa-6076 : libpng-dev - security update (278084) ]

+ Action to take : Upgrade the libpng-dev packages.

+Impact : Taking this action will resolve 5 different vulnerabilities (CVEs).



[ Debian dsa-6084 : libc-ares-dev - security update (279112) ]

+ Action to take : Upgrade the libc-ares-dev packages.


[ Debian dsa-6088 : libapache2-mod-php8.4 - security update (279493) ]

+ Action to take : Upgrade the libapache2-mod-php8.4 packages.

+Impact : Taking this action will resolve 3 different vulnerabilities (CVEs).



[ Debian dsa-6094 : libsodium-dev - security update (281783) ]

+ Action to take : Upgrade the libsodium-dev packages.


[ OpenSSH < 10.1 / 10.1p1 Multiple Vulnerabilities (269984) ]

+ Action to take : Upgrade to OpenSSH version 10.1/10.1p1 or later.

+Impact : Taking this action will resolve 2 different vulnerabilities (CVEs).

Reports remote services that do not offer post-quantum ciphers.

This plugin reports network services that do not offer post-quantum ciphers. Tenable makes no attempt to determine whether the remote service would be vulnerable to a post-quantum attack.

However, cryptography that depends on the classic difficulty of solving the discrete logarithm problem or on the classic difficulty of large prime factorization is broken by Shor's algorithm. Examples of this are RSA asymmetric encryption and Diffie-Hellman key exchange.

n/a

None

Published: 2025/12/08, Modified: 2025/12/08

The target SSH server offers no post-quantum ciphers.

An SSH server is listening on this port.

This script detects which algorithms and languages are supported by the remote service for encrypting communications.

n/a

None

Published: 2013/10/28, Modified: 2025/12/08

Nessus negotiated the following encryption algorithm(s) with the server :

Client to Server: aes256-ctr
Server to Client: aes256-ctr

The server supports the following options for compression_algorithms_server_to_client :

none
zlib@openssh.com

The server supports the following options for mac_algorithms_client_to_server :

hmac-sha1
hmac-sha1-etm@openssh.com
hmac-sha2-256
hmac-sha2-256-etm@openssh.com
hmac-sha2-512
hmac-sha2-512-etm@openssh.com
umac-128-etm@openssh.com
umac-128@openssh.com
umac-64-etm@openssh.com
umac-64@openssh.com

The server supports the following options for server_host_key_algorithms :

ecdsa-sha2-nistp256
rsa-sha2-256
rsa-sha2-512
ssh-ed25519

The server supports the following options for encryption_algorithms_client_to_server :

aes128-ctr
aes128-gcm@openssh.com
aes192-ctr
aes256-ctr
aes256-gcm@openssh.com
chacha20-poly1305@openssh.com

The server supports the following options for mac_algorithms_server_to_client :

hmac-sha1
hmac-sha1-etm@openssh.com
hmac-sha2-256
hmac-sha2-256-etm@openssh.com
hmac-sha2-512
hmac-sha2-512-etm@openssh.com
umac-128-etm@openssh.com
umac-128@openssh.com
umac-64-etm@openssh.com
umac-64@openssh.com

The server supports the following options for kex_algorithms :

curve25519-sha256
curve25519-sha256@libssh.org
ecdh-sha2-nistp256
ecdh-sha2-nistp384
ecdh-sha2-nistp521
ext-info-s
kex-strict-s-v00@openssh.com
mlkem768x25519-sha256
sntrup761x25519-sha512
sntrup761x25519-sha512@openssh.com

The server supports the following options for compression_algorithms_client_to_server :

none
zlib@openssh.com

The server supports the following options for encryption_algorithms_server_to_client :

aes128-ctr
aes128-gcm@openssh.com
aes192-ctr
aes256-ctr
aes256-gcm@openssh.com
chacha20-poly1305@openssh.com