Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil Exam 212-82 Topic 18 Question 47 Discussion

Actual exam question for Eccouncil's 212-82 exam
Question #: 47
Topic #: 18
[All 212-82 Questions]

You have been assigned to perform a vulnerability assessment of a web server located at IP address 20.20.10.26. Identify the vulnerability with a severity score of &

Show Suggested Answer Hide Answer
Suggested Answer: A, A

TCP Timestamps is the vulnerability with a severity score of 8.0. This can be verified by performing a vulnerability assessment of the web server located at IP address 20.20.10.26 using the OpenVAS vulnerability scanner, available with the Parrot Security machine, with credentials admin/password. To perform the vulnerability assessment, one can follow these steps:

Launch the Parrot Security machine and open a terminal.

Enter the command sudo openvas-start to start the OpenVAS service and wait for a few minutes until it is ready.

Open a web browser and navigate to https://127.0.0.1:9392 to access the OpenVAS web interface.

Enter the credentials admin/password to log in to OpenVAS.

Click on Scans -> Tasks from the left menu and then click on the blue icon with a star to create a new task.

Enter a name and a comment for the task, such as ''Web Server Scan''.

Select ''Full and fast'' as the scan config from the drop-down menu.

Click on the icon with a star next to Target to create a new target.

Enter a name and a comment for the target, such as ''Web Server''.

Enter 20.20.10.26 as the host in the text box and click on Save.

Select ''Web Server'' as the target from the drop-down menu and click on Save.

Click on the green icon with a play button next to the task name to start the scan and wait for it to finish.

Click on the task name to view the scan report and click on Results from the left menu to see the list of vulnerabilities found.

Sort the list by Severity in descending order and look for the vulnerability with a severity score of 8.0. The screenshot below shows an example of performing these steps: The vulnerability with a severity score of 8.0 is TCP Timestamps, which is an option in TCP packets that can be used to measure round-trip time and improve performance, but it can also reveal information about the system's uptime, clock skew, or TCP sequence numbers, which can be used by attackers to launch various attacks, such as idle scanning, OS fingerprinting, or TCP hijacking1. The vulnerability report provides more details about this vulnerability, such as its description, impact, solution, references, and CVSS score2. Reference: Screenshot of OpenVAS showing TCP Timestamps vulnerability, TCP Timestamps Vulnerability, Vulnerability Report


Contribute your Thoughts:

Chantell
23 days ago
OpenVAS with admin/password? Ah, the old 'default creds' trick. I'll keep that one in my back pocket.
upvoted 0 times
...
Beula
24 days ago
UDP timestamps? Really? What is this, amateur hour? TCP timestamps all the way, baby!
upvoted 0 times
Melissa
1 days ago
I agree, TCP timestamps are definitely the way to go for this vulnerability assessment.
upvoted 0 times
...
Jerilyn
3 days ago
TCP timestamps all the way! UDP timestamps are a joke.
upvoted 0 times
...
...
Mila
29 days ago
That's a good point, Alyssa. We should check both FTP and TCP timestamps.
upvoted 0 times
...
Caren
1 months ago
Anonymous FTP login reporting? That's so 90s, I'm going with the FTP unencrypted cleartext login.
upvoted 0 times
Britt
1 days ago
Anonymous FTP login reporting is definitely outdated.
upvoted 0 times
...
Lai
12 days ago
I think TCP timestamps could also be a potential issue.
upvoted 0 times
...
Jestine
18 days ago
I agree, FTP unencrypted cleartext login is a major vulnerability.
upvoted 0 times
...
...
Alyssa
1 months ago
I believe it could also be TCP timestamps, as they can be used for fingerprinting.
upvoted 0 times
...
Angella
1 months ago
TCP timestamps could be a juicy vulnerability, let's look into that one.
upvoted 0 times
Artie
29 days ago
I think using the OpenVAS vulnerability scanner with admin/password credentials is a good idea to check for it.
upvoted 0 times
...
Becky
1 months ago
I agree, TCP timestamps could definitely be a potential vulnerability.
upvoted 0 times
...
...
Henriette
2 months ago
I agree with Mila, FTP Unencrypted Cleartext Login is a common vulnerability.
upvoted 0 times
...
Mila
2 months ago
I think the vulnerability might be related to FTP Unencrypted Cleartext Login.
upvoted 0 times
...
Malissa
2 months ago
Hmm, OpenVAS with those creds? Sounds like a trap to me. I'll pass on that one.
upvoted 0 times
Bonita
1 months ago
I think I'll stick to manual testing for this one.
upvoted 0 times
...
Slyvia
2 months ago
I agree, using admin/password for a vulnerability assessment is risky.
upvoted 0 times
...
...

Save Cancel