Remote Date Disclosure Research Paper.

Synopsis: It is possible to determine the exact time set on the remote host.

Description: The remote host answers to an ICMP timestamp request. This allows an attacker to know the date which is set on your machine. This may help him to defeat all your time based authentication protocols. Risk factor: None Solution: Filter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14). Remote Date Disclosure Research Paper. Plugin output: This host returns non-standard timestamps (high bit is set) Plugin ID: 10114

ORDER A CUSTOM-WRITTEN, PLAGIARISM-FREE PAPER HERE

Page 1 of 76Nessus Scan Report

8/5/2010mhtml:file://C:\Documents and Settings\acaballero\Desktop\nessus_MockITScan.mht

CVE: CVE-1999-0524 Other references: OSVDB:94

Nessus Scan Information

Information about this scan : Nessus version : 4.2.2 (Build 9129) Plugin feed version : 201007191034

Type of plugin feed : HomeFeed (Non-commercial use only) Scanner IP : 172.30.0.67 Port scanner(s) : nessus_syn_scanner Port range : default Thorough tests : no Experimental tests : no Paranoia level : 1 Report Verbosity : 1 Safe checks : no Optimize the test : yes CGI scanning : Remote Date Disclosure Research Paper.disabled Web application tests : disabled Max hosts : 80 Max checks : 5 Recv timeout : 5 Backports : None Scan Start Date : 2010/8/5 11:34 Scan duration : 132 sec Plugin ID: 19506

[^] Back to 172.16.20.1

[^] Back

172.17.20.1 Scan Time

Start time : Thu Aug 05 11:34:38 2010

End time : Thu Aug 05 11:37:36 2010

Number of vulnerabilities

Open ports : 5

High : 1

Medium : 0

Low : 8

Remote host information

Operating System : KYOCERA Printer

NetBIOS name :

DNS name :

ORDER A CUSTOM-WRITTEN, PLAGIARISM-FREE PAPER HERE

[^] Back to 172.17.20.1

Port general (0/icmp) [-/+]

ICMP Timestamp Request Remote Date Disclosure

Synopsis: It is possible to determine the exact time set on the remote host. Description: The remote host answers to an ICMP timestamp request. This allows an attacker to know the date which is set on your machine. This may help him to defeat all your time based authentication protocols. Risk factor: None Solution: Remote Date Disclosure Research Paper.

Page 2 of 76Nessus Scan Report

8/5/2010mhtml:file://C:\Documents and Settings\acaballero\Desktop\nessus_MockITScan.mht

Filter out the ICMP timestamp requests (13), and the outgoing ICMP timestamp replies (14). Plugin output: This host returns non-standard timestamps (high bit is set) Plugin ID: 10114

CVE: CVE-1999-0524 Other references: OSVDB:94

OS Identification. Remote Date Disclosure Research Paper.