ID de Prueba:	1.3.6.1.4.1.25623.1.0.900600
Categoría:	FTP
Título:	Anonymous FTP Login Reporting
Resumen:	Reports if the remote FTP Server allows anonymous logins.
Descripción:	Summary: Reports if the remote FTP Server allows anonymous logins. Vulnerability Insight: A host that provides an FTP service may additionally provide Anonymous FTP access as well. Under this arrangement, users do not strictly need an account on the host. Instead the user typically enters 'anonymous' or 'ftp' when prompted for username. Although users are commonly asked to send their email address as their password, little to no verification is actually performed on the supplied data. Remark: NIST don't see 'configuration issues' as software flaws so the referenced CVE has a severity of 0.0. The severity of this VT has been raised by Greenbone to still report a configuration issue on the target. Vulnerability Impact: Based on the files accessible via this anonymous FTP login and the permissions of this account an attacker might be able to: - gain access to sensitive files - upload or delete files. Solution: If you do not want to share files, you should disable anonymous logins. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0497 https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0497
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.