Compromised Hosts Report

ProMetasploit
Compromised Hosts Report

Report generated:
Thu, 11 Feb 2021 10:44:55 +0700
Total Pages: 56
PROJECT SUMMARY
Project Name: Metasploit feat Nexpose
Started: 2/6/21 9:54 AM
Completed: 2/11/21 3:44 AM
User: ridho.abdillah
EXECUTIVE SUMMARY
This report represents a security audit performed using Metasploit Pro from Rapid7, Inc. It contains confidential
information about the state of your network. Access to this information by unauthorized personnel may allow them to
compromise your network.
During this test, 1 hosts with a total of 29 exposed services were discovered. No modules were successfully run and no
login credentials were obtained.
Compromised Hosts Report Summary

The purpose of this report is to list hosts which were compromised during the penetration test. As no sessions were opened,
there is nothing to report.
Page 1 of 56
Disclosed Vulnerabilities
If a Metasploit module successfully exploits a target, it is automatically considered "vulnerable" to that exploit. Most, but not all, Metasploit modules open a
session against the target when they are successfully run. Other vulnerabilities, such as those imported from third party vulnerability scanners and those
entered manually against a host, are cross-checked against Metasploit modules for matching vulnerability references. These modules may then be used
to test the target hosts for exploitability.
Vulnerability Name Affected Hosts

USN-786-1: apr-util vulnerabilities 192.168.149.129
Associated Modules
<no matching module>
References: BID-35221 - http://www.securityfocus.com/bid/35221

BID-35251 - http://www.securityfocus.com/bid/35251
CVE-2009-0023 - http://cvedetails.com/cve/CVE-2009-0023
Vulnerability Test Status

Metasploit Module Host Discovered At Tested At Result
<no matching module> <not tested> <not tested> <not tested> <not tested>

USN-671-1: MySQL vulnerabilities 192.168.149.129
Associated Modules



Associated Modules
Page 2 of 56


USN-1229-1: PostgreSQL vulnerability 192.168.149.129
Associated Modules



USN-1442-1: Sudo vulnerability 192.168.149.129
Associated Modules
References: CVE-2012-2337 - http://cvedetails.com/cve/CVE-2012-2337


USN-613-1: GnuTLS vulnerabilities 192.168.149.129
Associated Modules

US-CERT-VU-111034
US-CERT-VU-252626
US-CERT-VU-659209


Anonymous root login is allowed 192.168.149.129
Associated Modules
Page 3 of 56
References:


USN-1231-1: PHP Vulnerabilities 192.168.149.129
Associated Modules
OSVDB-72644
OSVDB-74739


Associated Modules



Associated Modules
exploit/linux/mysql/mysql_yassl_getname
Page 4 of 56
OSVDB-55734
OSVDB-61956
OSVDB-78371
OSVDB-78372
OSVDB-78374
OSVDB-78375
OSVDB-78377
OSVDB-78378
Page 5 of 56
OSVDB-78379
OSVDB-78383
OSVDB-78384
OSVDB-78385
OSVDB-78386
OSVDB-78387
OSVDB-78388
OSVDB-78389
OSVDB-78390
OSVDB-78393
OSVDB-78394

exploit/linux/mysql/mysql_yassl_getname <not tested> <not tested> <not tested> <not tested>

CVE-2012-1033: Ghost Domain Names: Revoked Yet Still
192.168.149.129
Resolvable
Associated Modules
References: BID-51898 - http://www.securityfocus.com/bid/51898 CVE-2012-
1033 - http://cvedetails.com/cve/CVE-2012-1033
URL - https://kb.isc.org/article/AA-00691/74/CVE-2012-1033%3A-Ghost-Domain-Names%3A-Revoked-Yet-Still-
Resolvable.html US-CERT-VU-542123


USN-813-1: apr vulnerability 192.168.149.129
Associated Modules

OSVDB-56765
OSVDB-56766


USN-1009-2: GNU C Library vulnerability 192.168.149.129
Associated Modules
References:


CVE-2014-6278 bash: code execution via specially crafted 192.168.149.129
Page 6 of 56
environment variables 192.168.149.129
Associated Modules
auxiliary/scanner/http/apache_mod_cgi_bash_env
exploit/multi/http/apache_mod_cgi_bash_env_exec
exploit/multi/http/cups_bash_env_exec

auxiliary/scanner/http/apache_mod_cgi_bash_env <not tested> <not tested> <not tested> <not tested>
exploit/multi/http/apache_mod_cgi_bash_env_exec <not tested> <not tested> <not tested> <not tested>
exploit/multi/http/cups_bash_env_exec <not tested> <not tested> <not tested> <not tested>

USN-1498-1: tiff vulnerabilities 192.168.149.129
Associated Modules



USN-1357-1: OpenSSL vulnerabilities 192.168.149.129
Associated Modules

OSVDB-78191
OSVDB-78320
US-CERT-VU-536044
US-CERT-VU-737740


Apache HTTPD: mod_proxy reverse proxy exposure (CVE-2011-
192.168.149.129
3368)
Page 7 of 56
Associated Modules
auxiliary/scanner/http/rewrite_proxy_bypass
URL - http://httpd.apache.org/security/vulnerabilities_13.html

auxiliary/scanner/http/rewrite_proxy_bypass <not tested> <not tested> <not tested> <not tested>

USN-640-1: libxml2 vulnerability 192.168.149.129
Associated Modules



USN-1589-1: GNU C Library vulnerabilities 192.168.149.129
Associated Modules

OSVDB-84710


Associated Modules



USN-1283-1: APT vulnerability 192.168.149.129
Page 8 of 56
Associated Modules


No password for Grub 192.168.149.129
Associated Modules
References:


USN-1308-1: bzip2 vulnerability 192.168.149.129
Associated Modules


MySQL Obsolete Version 192.168.149.129
Associated Modules
References: URL - http://www.mysql.com/company/legal/lifecycle/

URL - http://www.mysql.com/support/eol-notice.html


'rsh' Remote Shell Service Enabled 192.168.149.129
Associated Modules
auxiliary/scanner/rservices/rexec_login
auxiliary/scanner/rservices/rlogin_login
auxiliary/scanner/rservices/rsh_login
Page 9 of 56
auxiliary/scanner/rservices/rexec_login <not tested> <not tested> <not tested> <not tested>
auxiliary/scanner/rservices/rlogin_login <not tested> <not tested> <not tested> <not tested>
auxiliary/scanner/rservices/rsh_login <not tested> <not tested> <not tested> <not tested>

USN-1374-1: Samba vulnerability 192.168.149.129
Associated Modules


USN-612-2: OpenSSH vulnerability 192.168.149.129
Associated Modules

US-CERT-VU-925211


USN-1199-1: Apache vulnerability 192.168.149.129
Associated Modules
auxiliary/dos/http/apache_range_dos
OSVDB-74721
US-CERT-VU-405811

auxiliary/dos/http/apache_range_dos <not tested> <not tested> <not tested> <not tested>

USN-1108-1: DHCP vulnerability 192.168.149.129
Associated Modules

OSVDB-71493
US-CERT-VU-107886
Page 10 of 56

Associated Modules

US-CERT-VU-737740


USN-1801-1: curl vulnerability 192.168.149.129
Associated Modules

OSVDB-92316


USN-653-1: D-Bus vulnerabilities 192.168.149.129
Associated Modules



USN-678-1: GnuTLS vulnerability 192.168.149.129
Associated Modules

Page 11 of 56

USN-889-1: gzip vulnerabilities 192.168.149.129
Associated Modules

OSVDB-61869


MySQL default account: root/no password 192.168.149.129
Associated Modules



USN-1267-1: FreeType vulnerabilities 192.168.149.129
Associated Modules



Associated Modules
exploit/linux/samba/chain_reply
OSVDB-65518
Page 12 of 56
exploit/linux/samba/chain_reply <not tested> <not tested> <not tested> <not tested>

USN-1367-1: libpng vulnerabilities 192.168.149.129
Associated Modules



USN-1655-1: LibTIFF vulnerability 192.168.149.129
Associated Modules



USN-1682-1: GnuPG vulnerability 192.168.149.129
Associated Modules



USN-989-1: PHP vulnerabilities 192.168.149.129
Associated Modules

Page 13 of 56


USN-1368-1: Apache HTTP Server vulnerabilities 192.168.149.129
Associated Modules

OSVDB-76744


ISC BIND: Handling of zero length rdata can cause named to
192.168.149.129
terminate unexpectedly (CVE-2012-1667)
Associated Modules
URL - https://kb.isc.org/article/AA-00698/0
URL - https://kb.isc.org/article/AA-00698/74/CVE-2012-1667%3A-Handling-of-zero-length-rdata-can-cause-named-to-terminate-
unexpectedly.html
US-CERT-VU-381699


CVE-2014-7186 bash: parser can allow out-of-bounds memory
192.168.149.129
access while handling redir_stack
Associated Modules

Page 14 of 56
USN-1601-1: Bind vulnerability 192.168.149.129
Associated Modules

OSVDB-86118


USN-758-1: udev vulnerabilities 192.168.149.129
Associated Modules
exploit/linux/local/udev_netlink

exploit/linux/local/udev_netlink <not tested> <not tested> <not tested> <not tested>

Associated Modules
exploit/osx/local/sudo_password_bypass
OSVDB-90677

exploit/osx/local/sudo_password_bypass <not tested> <not tested> <not tested> <not tested>

USN-808-1: Bind vulnerability 192.168.149.129
Associated Modules

US-CERT-VU-725188


Page 15 of 56
Associated Modules
OSVDB-65676


Oracle MySQL Vulnerability: CVE-2009-5026 192.168.149.129
Associated Modules


USN-837-1: Newt vulnerability 192.168.149.129
Associated Modules



OpenSSH "X11UseLocalhost" X11 Forwarding Session Hijacking
192.168.149.129
Vulnerability
Associated Modules


USN-636-1: Postfix vulnerability 192.168.149.129
Associated Modules
Page 16 of 56
US-CERT-VU-938323


Associated Modules



USN-892-1: FUSE vulnerability 192.168.149.129
Associated Modules



ISC BIND: A query name which is too long can cause a
192.168.149.129
segmentation fault in lwresd (CVE-2016-2775)
Associated Modules


USN-1237-1: PAM vulnerabilities 192.168.149.129
Associated Modules

Page 17 of 56

Associated Modules

OSVDB-89935


PHP Vulnerability: CVE-2012-1823 192.168.149.129
Associated Modules
exploit/multi/http/php_cgi_arg_injection
US-CERT-VU-520827
US-CERT-VU-673343

exploit/multi/http/php_cgi_arg_injection <not tested> <not tested> <not tested> <not tested>

USN-1158-1: curl vulnerabilities 192.168.149.129
Associated Modules



USN-1789-1: PostgreSQL vulnerabilities 192.168.149.129
Associated Modules
auxiliary/scanner/postgres/postgres_dbname_flag_injection
Page 18 of 56
auxiliary/scanner/postgres/postgres_dbname_flag_i <not tested> <not tested> <not tested> <not tested>
njection

USN-1082-1: Pango vulnerabilities 192.168.149.129
Associated Modules

OSVDB-70596


USN-1172-1: logrotate vulnerabilities 192.168.149.129
Associated Modules



USN-670-1: VMBuilder vulnerability 192.168.149.129
Associated Modules
References:


Associated Modules

URL - http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html
Page 19 of 56

USN-1546-1: libgc vulnerability 192.168.149.129
Associated Modules



USN-624-1: PCRE vulnerability 192.168.149.129
Associated Modules



Associated Modules
auxiliary/scanner/mysql/mysql_authbypass_hashdump

auxiliary/scanner/mysql/mysql_authbypass_hashdu <not tested> <not tested> <not tested> <not tested>
mp

Associated Modules


Page 20 of 56
USN-986-1: bzip2 vulnerability 192.168.149.129
Associated Modules


MySQL Bug #37428: User-Defind Function Remote Code
192.168.149.129
Execution
Associated Modules
References: URL - http://bugs.mysql.com/bug.php?id=37428


Associated Modules
exploit/linux/samba/setinfopolicy_heap

exploit/linux/samba/setinfopolicy_heap <not tested> <not tested> <not tested> <not tested>

USN-1215-1: APT vulnerabilities 192.168.149.129
Associated Modules
References:


Associated Modules
Page 21 of 56


USN-1631-1: LibTIFF vulnerabilities 192.168.149.129
Associated Modules

OSVDB-86878


USN-673-1: libxml2 vulnerabilities 192.168.149.129
Associated Modules

OSVDB-49992
OSVDB-49993


USN-778-1: cron vulnerability 192.168.149.129
Associated Modules



USN-704-1: OpenSSL vulnerability 192.168.149.129
Associated Modules
Page 22 of 56

Associated Modules
OSVDB-66828


ISC BIND: BIND 9 DNSSEC validation code could cause bogus
192.168.149.129
NXDOMAIN responses (CVE-2010-0097)
Associated Modules
URL - https://kb.isc.org/article/AA-00932/187/CVE-2010-0097%3A-BIND-9-DNSSEC-validation-code-could-cause-bogus-
NXDOMAIN-responses.html
US-CERT-VU-360341


Database Open Access 192.168.149.129
Associated Modules
References: URL - https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-1.pdf


Page 23 of 56
Associated Modules
OSVDB-75560


USN-1307-1: PHP vulnerability 192.168.149.129
Associated Modules



USN-986-3: dpkg vulnerability 192.168.149.129
Associated Modules


USN-1044-1: D-Bus vulnerability 192.168.149.129
Associated Modules



Associated Modules
Page 24 of 56
US-CERT-VU-210829


Associated Modules


USN-1077-1: FUSE vulnerabilities 192.168.149.129
Associated Modules


Page 25 of 56
MySQL Bug #29908: ALTER VIEW Privilege Escalation
192.168.149.129
Vulnerability
Associated Modules


USN-1022-1: APR-util vulnerability 192.168.149.129
Associated Modules



MySQL Bug #32707: send_error() Buffer Overflow Vulnerability 192.168.149.129
Associated Modules


Associated Modules



USN-839-1: Samba vulnerabilities 192.168.149.129
Associated Modules
Page 26 of 56
OSVDB-57955
OSVDB-58519
OSVDB-58520


ISC BIND: BIND 9 Cache Update from Additional Section (CVE-
192.168.149.129
2009-4022)
Associated Modules
URL - https://kb.isc.org/article/AA-00931/187/CVE-2009-4022%3A-BIND-9-Cache-Update-from-Additional-Section.html
US-CERT-VU-418861


User home directory mode unsafe 192.168.149.129
Associated Modules
References:


USN-981-1: libwww-perl vulnerability 192.168.149.129
Associated Modules


User umask value is unsafe 192.168.149.129
Page 27 of 56
Associated Modules
References:


Associated Modules



Associated Modules



USN-956-1: sudo vulnerability 192.168.149.129
Associated Modules

OSVDB-65083


USN-762-1: APT vulnerabilities 192.168.149.129
Associated Modules
Page 28 of 56


USN-967-1: w3m vulnerability 192.168.149.129
Associated Modules

OSVDB-65538


Associated Modules

US-CERT-VU-819894


MySQL Bug #38296: Nested Boolean Query Exhaustion Denial of
192.168.149.129
Service
Associated Modules


USN-953-1: fastjar vulnerability 192.168.149.129
Associated Modules

Page 29 of 56

Associated Modules
OSVDB-80718


Associated Modules



Exported volume is publicly mountable 192.168.149.129
Associated Modules
References:


USN-1140-1: PAM vulnerabilities 192.168.149.129
Page 30 of 56
Associated Modules


USN-1570-1: GnuPG vulnerability 192.168.149.129
Associated Modules
References:


USN-1613-1: Python 2.5 vulnerabilities 192.168.149.129
Associated Modules



Apache HTTPD: Range header remote DoS (CVE-2011-3192) 192.168.149.129
Associated Modules
auxiliary/dos/http/apache_range_dos
Page 31 of 56
US-CERT-VU-405811

auxiliary/dos/http/apache_range_dos <not tested> <not tested> <not tested> <not tested>

Associated Modules



Associated Modules



Associated Modules



/etc/hosts.equiv allows remote access from some systems 192.168.149.129
Associated Modules
References:
Page 32 of 56

Associated Modules

OSVDB-61038
OSVDB-61039


USN-612-4: ssl-cert vulnerability 192.168.149.129
Associated Modules

US-CERT-VU-925211


Associated Modules



Associated Modules

Page 33 of 56


USN-905-1: sudo vulnerabilities 192.168.149.129
Associated Modules



USN-726-1: curl vulnerability 192.168.149.129
Associated Modules



USN-1417-1: libpng vulnerability 192.168.149.129
Associated Modules

OSVDB-80822


Associated Modules
Page 34 of 56
US-CERT-VU-479900


Associated Modules



Associated Modules

OSVDB-81025


USN-1259-1: Apache vulnerabilities 192.168.149.129
Associated Modules
auxiliary/scanner/http/rewrite_proxy_bypass
OSVDB-76079

auxiliary/scanner/http/rewrite_proxy_bypass <not tested> <not tested> <not tested> <not tested>
Page 35 of 56
'rlogin' Remote Login Service Enabled 192.168.149.129
Associated Modules
auxiliary/scanner/rservices/rexec_login
auxiliary/scanner/rservices/rlogin_login
auxiliary/scanner/rservices/rsh_login

auxiliary/scanner/rservices/rexec_login <not tested> <not tested> <not tested> <not tested>
auxiliary/scanner/rservices/rlogin_login <not tested> <not tested> <not tested> <not tested>
auxiliary/scanner/rservices/rsh_login <not tested> <not tested> <not tested> <not tested>

USN-1770-1: Perl vulnerability 192.168.149.129
Associated Modules

OSVDB-90892


Associated Modules
exploit/linux/mysql/mysql_yassl_getname
OSVDB-55734
OSVDB-61956

exploit/linux/mysql/mysql_yassl_getname <not tested> <not tested> <not tested> <not tested>

USN-813-3: apr-util vulnerability 192.168.149.129
Page 36 of 56
Associated Modules
OSVDB-56765
OSVDB-56766


MySQL vio_verify_callback() Zero-Depth X.509 Certificate
192.168.149.129
Vulnerability
Associated Modules
URL - http://bugs.mysql.com/bug.php?id=47320
URL - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html
URL - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html


Associated Modules
auxiliary/dos/http/hashcollision_dos
OSVDB-78819
US-CERT-VU-903934

auxiliary/dos/http/hashcollision_dos <not tested> <not tested> <not tested> <not tested>

Partition Mounting Weakness 192.168.149.129
Associated Modules
References:
Page 37 of 56

Associated Modules



ISC BIND: A specially crafted Resource Record could cause
192.168.149.129
named to terminate (CVE-2012-4244)
Associated Modules
URL - https://kb.isc.org/article/AA-00778/74/CVE-2012-4244%3A-A-specially-crafted-Resource-Record-could-cause-named-to-
terminate.html


USN-1576-1: DBus vulnerability 192.168.149.129
Associated Modules



Associated Modules

OSVDB-80259
Page 38 of 56

USN-1477-1: APT vulnerability 192.168.149.129
Associated Modules



Associated Modules
exploit/linux/local/glibc_ld_audit_dso_load_priv_esc
exploit/linux/local/glibc_origin_expansion_priv_esc
US-CERT-VU-537223

exploit/linux/local/glibc_ld_audit_dso_load_priv_esc <not tested> <not tested> <not tested> <not tested>
exploit/linux/local/glibc_origin_expansion_priv_esc <not tested> <not tested> <not tested> <not tested>

USN-803-1: dhcp vulnerability 192.168.149.129
Associated Modules

OSVDB-55819
US-CERT-VU-410676


Associated Modules
References:
Page 39 of 56

Associated Modules

OSVDB-73248


USN-982-1: Wget vulnerability 192.168.149.129
Associated Modules


Apache HTTPD: Use-after-free when using <Limit > with an
unrecognized method in .htaccess ("OptionsBleed") (CVE-2017- 192.168.149.129 9798)
Associated Modules
auxiliary/scanner/http/apache_optionsbleed

auxiliary/scanner/http/apache_optionsbleed <not tested> <not tested> <not tested> <not tested>

Associated Modules
Page 40 of 56

ISC BIND: Cache incorrectly allows a ncache entry and a rrsig for
192.168.149.129
the same type (CVE-2010-3613)
Associated Modules
URL - https://kb.isc.org/article/AA-00938/187/CVE-2010-3613%3A-cache-incorrectly-allows-a-ncache-entry-and-a-rrsig-for-the-
same-type.html
US-CERT-VU-706148


USN-890-1: Expat vulnerabilities 192.168.149.129
Associated Modules



USN-732-1: dash vulnerability 192.168.149.129
Associated Modules



DNS Traffic Amplification 192.168.149.129
Associated Modules
Page 41 of 56
References:


Associated Modules



Associated Modules



USN-1021-1: Apache vulnerabilities 192.168.149.129
Associated Modules



USN-1436-1: Libtasn1 vulnerability 192.168.149.129
Associated Modules
Page 42 of 56

USN-1643-1: Perl vulnerabilities 192.168.149.129
Associated Modules



MySQL Bug #29801: Remote Federated Engine Crash 192.168.149.129
Associated Modules


Associated Modules
auxiliary/admin/smb/samba_symlink_traversal

auxiliary/admin/smb/samba_symlink_traversal <not tested> <not tested> <not tested> <not tested>

ISC BIND: Key algorithm rollover bug in bind9 (CVE-2010-3614) 192.168.149.129
Associated Modules

URL - https://kb.isc.org/article/AA-00936/187/CVE-2010-3614%3A-Key-algorithm-rollover-bug-in-bind9.html
US-CERT-VU-837744
Page 43 of 56

USN-1527-1: Expat vulnerabilities 192.168.149.129
Associated Modules



USN-855-1: libhtml-parser-perl vulnerability 192.168.149.129
Associated Modules



USN-1656-1: Libxml2 vulnerability 192.168.149.129
Associated Modules



Associated Modules
auxiliary/dos/ssl/openssl_aesni
US-CERT-VU-737740
Page 44 of 56
auxiliary/dos/ssl/openssl_aesni <not tested> <not tested> <not tested> <not tested>

USN-1113-1: Postfix vulnerabilities 192.168.149.129
Associated Modules

OSVDB-71021
US-CERT-VU-555316


Obsolete Version of Ubuntu 192.168.149.129
Associated Modules
References:


Associated Modules



USN-799-1: D-Bus vulnerability 192.168.149.129
Associated Modules

Page 45 of 56

TCP timestamp response 192.168.149.129
Associated Modules
References: URL - http://uptime.netcraft.com

URL - http://www.forensicswiki.org/wiki/TCP_timestamps
URL - http://www.ietf.org/rfc/rfc1323.txt


USN-1102-1: tiff vulnerability 192.168.149.129
Associated Modules

OSVDB-71256


Associated Modules



USN-722-1: sudo vulnerability 192.168.149.129
Associated Modules
Page 46 of 56
OSVDB-51736


UDP IP ID Zero 192.168.149.129
Associated Modules
References:


USN-1045-1: FUSE vulnerability 192.168.149.129
Associated Modules

OSVDB-70520


Associated Modules



USN-842-1: Wget vulnerability 192.168.149.129
Associated Modules

Page 47 of 56

Associated Modules



Associated Modules

OSVDB-72259
US-CERT-VU-727230


Associated Modules
References:


USN-1752-1: GnuTLS vulnerability 192.168.149.129
Associated Modules


Page 48 of 56
USN-990-2: Apache vulnerability 192.168.149.129
Associated Modules
MS10-049 - http://www.microsoft.com/technet/security/bulletin/MS10-049.mspx
OSVDB-60521
OSVDB-60972
OSVDB-62210
OSVDB-65202
US-CERT-VU-120541


ICMP timestamp response 192.168.149.129
Associated Modules

OSVDB-95


Associated Modules



ISC BIND: BIND 9 Resolver crashes after logging an error in
192.168.149.129
query.c (CVE-2011-4313)
Associated Modules
URL - https://kb.isc.org/article/AA-00544/74/CVE-2011-4313%3A-BIND-9-Resolver-crashes-after-logging-an-error-in-query.c.html
US-CERT-VU-606539
Page 49 of 56

USN-617-1: Samba vulnerabilities 192.168.149.129
Associated Modules



Associated Modules



CVE-2014-7187 bash: off-by-one error in deeply nested flow
192.168.149.129
control constructs
Associated Modules


USN-790-1: Cyrus SASL vulnerability 192.168.149.129
Associated Modules

OSVDB-54514
OSVDB-54515
US-CERT-VU-238019
Page 50 of 56

USN-1134-1: APR vulnerabilities 192.168.149.129
Associated Modules



MySQL Bug #44798: Stored Procedures Server Crash 192.168.149.129
Associated Modules


Associated Modules



Associated Modules

Page 51 of 56

USN-1402-1: libpng vulnerability 192.168.149.129
Associated Modules


USN-695-1: shadow vulnerability 192.168.149.129
Associated Modules

OSVDB-52200


Associated Modules



ISC BIND: Buffer overflow in inet_network() (CVE-2008-0122) 192.168.149.129
Associated Modules

URL - https://kb.isc.org/article/AA-00923/187/CVE-2008-0122%3A-Buffer-overflow-in-inet_network.html
US-CERT-VU-203611
Page 52 of 56

Associated Modules



CVE-2014-6271 bash: specially-crafted environment variables can
192.168.149.129
be used to inject shell commands
Associated Modules
auxiliary/scanner/http/apache_mod_cgi_bash_env
auxiliary/server/dhclient_bash_env
exploit/linux/http/advantech_switch_bash_env_exec
exploit/linux/http/ipfire_bashbug_exec
exploit/multi/ftp/pureftpd_bash_env_exec
exploit/multi/http/apache_mod_cgi_bash_env_exec
exploit/multi/http/cups_bash_env_exec
exploit/osx/local/vmware_bash_function_root
exploit/unix/dhcp/bash_environment
exploit/unix/smtp/qmail_bash_env_exec
URL - https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/

exploit/linux/http/ipfire_bashbug_exec <not tested> <not tested> <not tested> <not tested>
exploit/unix/dhcp/bash_environment <not tested> <not tested> <not tested> <not tested>
auxiliary/server/dhclient_bash_env <not tested> <not tested> <not tested> <not tested>
exploit/osx/local/vmware_bash_function_root <not tested> <not tested> <not tested> <not tested>
auxiliary/scanner/http/apache_mod_cgi_bash_env <not tested> <not tested> <not tested> <not tested>
exploit/linux/http/advantech_switch_bash_env_exec <not tested> <not tested> <not tested> <not tested>
exploit/multi/http/cups_bash_env_exec <not tested> <not tested> <not tested> <not tested>
exploit/multi/ftp/pureftpd_bash_env_exec <not tested> <not tested> <not tested> <not tested>
exploit/multi/http/apache_mod_cgi_bash_env_exec <not tested> <not tested> <not tested> <not tested>
exploit/unix/smtp/qmail_bash_env_exec <not tested> <not tested> <not tested> <not tested>

USN-1437-1: PHP vulnerability 192.168.149.129
Page 53 of 56
Associated Modules
exploit/multi/http/php_cgi_arg_injection
US-CERT-VU-520827
US-CERT-VU-673343

exploit/multi/http/php_cgi_arg_injection <not tested> <not tested> <not tested> <not tested>

Associated Modules



Associated Modules



Associated Modules
Page 54 of 56


Associated Modules


Page 55 of 56
Login Details
Host Service Public Private Type Last Attempted Access Level
METASPLOITABLE ftp (21/TCP) postgres Password 2021-02-07 04:52 AM null
METASPLOITABLE postgres (5432/TCP) postgres Password 2021-02-07 04:52 AM null
METASPLOITABLE telnet (23/TCP) postgres Password 2021-02-07 04:52 AM null
METASPLOITABLE ssh (22/TCP) postgres Password 2021-02-07 04:52 AM null
METASPLOITABLE ftp (21/TCP) ftp Password 2021-02-07 04:52 AM null
METASPLOITABLE ftp (21/TCP) anonymous Password 2021-02-07 04:52 AM null
Page 56 of 56

Compromised Hosts Report

Uploaded by

Copyright:

Available Formats

You might also like

Compromised Hosts Report

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Compromised Hosts Report

Uploaded by

Copyright:

Available Formats

ProMetasploit

Compromised Hosts Report

Started: 2/6/21 9:54 AM

Completed: 2/11/21 3:44 AM

Compromised Hosts Report Summary

Vulnerability Name Affected Hosts

References: BID-35221 - http://www.securityfocus.com/bid/35221

Vulnerability Test Status

Vulnerability Name Affected Hosts

References: BID-29106 - http://www.securityfocus.com/bid/29106

Vulnerability Test Status

Vulnerability Name Affected Hosts

Vulnerability Test Status

Vulnerability Name Affected Hosts

References: BID-49241 - http://www.securityfocus.com/bid/49241

Vulnerability Test Status

Vulnerability Name Affected Hosts

References: CVE-2012-2337 - http://cvedetails.com/cve/CVE-2012-2337

Vulnerability Test Status

Vulnerability Name Affected Hosts

References: BID-29292 - http://www.securityfocus.com/bid/29292

Vulnerability Test Status

Vulnerability Name Affected Hosts

Vulnerability Test Status

Vulnerability Name Affected Hosts

Vulnerability Test Status

Vulnerability Name Affected Hosts

References: CVE-2009-2409 - http://cvedetails.com/cve/CVE-2009-2409

Vulnerability Test Status

Vulnerability Name Affected Hosts

Vulnerability Test Status

Vulnerability Name Affected Hosts

Vulnerability Test Status

Vulnerability Name Affected Hosts

References: BID-35949 - http://www.securityfocus.com/bid/35949

Vulnerability Test Status

Vulnerability Name Affected Hosts

Vulnerability Test Status

Vulnerability Name Affected Hosts

Vulnerability Test Status

exploit/multi/http/apache_mod_cgi_bash_env_exec <not tested> <not tested> <not tested> <not tested>

exploit/multi/http/cups_bash_env_exec <not tested> <not tested> <not tested> <not tested>

Vulnerability Name Affected Hosts

References: BID-54076 - http://www.securityfocus.com/bid/54076

Vulnerability Test Status

Vulnerability Name Affected Hosts

References: BID-51563 - http://www.securityfocus.com/bid/51563

Vulnerability Test Status

Vulnerability Name Affected Hosts

Vulnerability Test Status

Vulnerability Name Affected Hosts

References: BID-30783 - http://www.securityfocus.com/bid/30783

Vulnerability Test Status

Vulnerability Name Affected Hosts

References: BID-54982 - http://www.securityfocus.com/bid/54982

Vulnerability Test Status

Vulnerability Name Affected Hosts