|
Family: Misc. --> Category: infos
NAI Management Agent leaks info Vulnerability Scan
Vulnerability Scan Summary Acertains if the remote NAI WebShield SMTP Management trusts us
Detailed Explanation for this Vulnerability Test
The remote NAI WebShield SMTP Management tool
gives away its configuration when it is issued
the command :
GET_CONFIG
This may be of some use to a possible hacker who will
gain more knowledge about this system.
Solution : filter incoming traffic to this port. You
may also restrict the set of trusted hosts in the
configuration console :
- go to the 'server' section
- select the 'trusted clients' tab
- and set the data accordingly
Threat Level: Low
Click HERE for more information and discussions on this network vulnerability scan.
|