<REPORT>
<SCANINFO
TOOLNAME="XXXX" MAKERS="XXXX"
POLICY="XXXX" SCANTASK="" SCANTIME="" FILE_ID=""/>
<!--
TOOLNAME="扫描工具名称" MAKERS="工具厂商名称"
POLICY="策略版本" SCANTASK="任务名称" SCANTIME="扫描时间" FILE_ID="文件ID(没啥大用处其实)" -->
<SCANDATA TYPE="OS">
<HOST IP="192.168.0.100">
<!-- *IP地址： -->
<OSTYPE>
WINDOWS</OSTYPE>
<!-- 操作系统类型：
Windows、Linux、.... -->
<OSVERSION>
Windows Server 2008</OSVERSION>
<!-- 操作系统版本：
Windows 2008、RedHat 9、.... -->
<DATA>
<VULNERABLITY>
<NAME>
<![CDATA[ Micros
oft
Windows Remote Desk
top Pro
tocol Server Man-in-
the-Middle Weakness ]]>
</NAME>
<!-- *漏洞名称： -->
<NO CVE="CVE-2005-1794" CNVD="CNVD-2005-1794" MS="MS07-111" O
THER="xxxx"/>
<!-- CVE="CVE编号" CNVD="CNVD编号" MS="微软编号" O
THER="其他编号",没有编号可用NONE标识 -->
<VULTYPE>缓存区溢出</VULTYPE>
<!-- 漏洞类型：如缓冲区溢出、设置不当、中间件漏洞、其他等等 -->
<CVSS>6.4</CVSS>
<!-- 通用漏洞评分： -->
<PORT>3389</PORT>
<!-- 端口： -->
<RISK>中</RISK>
<!-- *风险情况：高、中、低、信息 -->
<SYNOPSIS>
<![CDATA[ It may be possible
to get access
to the remote host ]]>
</SYNOPSIS>
<!-- 漏洞简述： -->
<DESCRIPTION>
<![CDATA[
The remote version
of the Remote Desk
top Pro
tocol Server (TerminalService) is vulnerable
to a man-in-
the-middle (MiTM) attack.
The RDP ]]>
</DESCRIPTION>
<!-- *漏洞描述 -->
<SOLUTION>
<![CDATA[ - Force
the use
of SSL as a transport layer for this service if supported, or/and ]]>
</SOLUTION>
<!-- *解决方案/整改意见 -->
<VALIDATE>
<![CDATA[ XXXXXX ]]>
</VALIDATE>
<!-- 证据 -->
<REFERENCE>
<![CDATA[ http://www.oxid.it/downloads/rdp-gbu.pdf ]]>
</REFERENCE>
<!-- 参考信息 -->
</VULNERABLITY>
<VULNERABLITY>
<NAME>
<![CDATA[ Terminal Services Encryption Level is Medium or Low ]]>
</NAME>
<!-- *漏洞名称： -->
<NO CVE="CVE-2005-1794" CNVD="CNVD-2005-1794" MS="MS07-111" O
THER="xxxx"/>
<!-- CVE="CVE编号" CNVD="CNVD编号" MS="微软编号" O
THER="其他编号" -->
<VULTYPE>设置不当</VULTYPE>
<!-- 漏洞类型：如缓冲区溢出、设置不当、中间件漏洞、其他等等 -->
<CVSS>6.4</CVSS>
<!-- 通用漏洞评分： -->
<PORT>3389</PORT>
<RISK>中</RISK>
>
<SYNOPSIS>
<![CDATA[
The remote host is using weak cryp
tography. ]]>
</SYNOPSIS>
<DESCRIPTION>
<![CDATA[
The remote Terminal Services service is not configured
to use
strong cryp
tography.xxxxxxxxxxxxxxxxxxxxx ]]>
</DESCRIPTION>
<SOLUTION>
<![CDATA[ -
Change RDP encryption level
to one
of :xxxxxxxxxxxxxxxxxx ]]>
</SOLUTION>
<VALIDATE>
<![CDATA[ XXXXX ]]>
</VALIDATE>
<REFERENCE>
<![CDATA[
The terminal services encryption level is set
to : ]]>
</REFERENCE>
</VULNERABLITY>
</DATA>
</HOST>
<HOST IP="102.168.20.20">
<OSTYPE>LINUX</OSTYPE>
<OSVERSION>RED HAT 9</OSVERSION>
<DATA>
<VULNERABLITY>
<NAME>
<![CDATA[ Micros
oft
Windows Remote Desk
top Pro
tocol Server Man-in-
the-Middle Weakness ]]>
</NAME>
<NO CVE="CVE-2005-1794" CNVD="CNVD-2005-1794" MS="MS07-111" O
THER="xxxx"/>
<!-- CVE="CVE编号" CNVD="CNVD编号" MS="微软编号" O
THER="其他编号" -->
<VULTYPE>缓存区溢出</VULTYPE>
<!-- 漏洞类型：如缓冲区溢出、设置不当、中间件漏洞、其他等等 -->
<CVSS>6.4</CVSS>
<!-- 通用漏洞评分： -->
<PORT>3389</PORT>
<RISK>中</RISK>
<SYNOPSIS>
<![CDATA[ It may be possible
to get access
to the remote host ]]>
</SYNOPSIS>
<DESCRIPTION>
<![CDATA[
The remote version
of the Remote Desk
top Pro
tocol Server (TerminalService) is vulnerable
to a man-in-
the-middle (MiTM) attack.
The RDP ]]>
</DESCRIPTION>
<SOLUTION>
<![CDATA[ - Force
the use
of SSL as a transport layer for this service if supported, or/and ]]>
</SOLUTION>
<VALIDATE>
<![CDATA[ XXXXX ]]>
</VALIDATE>
<REFERENCE>
<![CDATA[ http://www.oxid.it/downloads/rdp-gbu.pdf ]]>
</REFERENCE>
</VULNERABLITY>
<VULNERABLITY>
<NAME>
<![CDATA[ Terminal Services Encryption Level is Medium or Low ]]>
</NAME>
<NO CVE="CVE-2005-1794" CNVD="CNVD-2005-1794" MS="MS07-111" O
THER="xxxx"/>
<!-- CVE="CVE编号" CNVD="CNVD编号" MS="微软编号" O
THER="其他编号" -->
<VULTYPE>设置不当</VULTYPE>
<!-- 漏洞类型：如缓冲区溢出、设置不当、中间件漏洞、其他等等 -->
<CVSS>6.4</CVSS>
<!-- 通用漏洞评分： -->
<PORT>3389</PORT>
<RISK>中</RISK>
<SYNOPSIS>
<![CDATA[
The remote host is using weak cryp
tography. ]]>
</SYNOPSIS>
<DESCRIPTION>
<![CDATA[
The remote Terminal Services service is not configured
to use
strong cryp
tography.xxxxxxxxxxxxxxxxxxxxx ]]>
</DESCRIPTION>
<SOLUTION>
<![CDATA[ -
Change RDP encryption level
to one
of :xxxxxxxxxxxxxxxxxx ]]>
</SOLUTION>
<VALIDATE>
<![CDATA[ XXXXX ]]>
</VALIDATE>
<REFERENCE>
<![CDATA[
The terminal services encryption level is set
to : ]]>
</REFERENCE>
</VULNERABLITY>
</DATA>
</HOST>
</SCANDATA>
<SCANDATA TYPE="DB">
<HOST IP="102.168.20.20">
<PORT>1433</PORT>
<DBTYPE>Micros
oft SQL Server</DBTYPE>
<DBVERSION>Micros
oft SQL Server 2008 R2</DBVERSION>
<DATA>
<VULNERABLITY>
<NAME>
<![CDATA[ Easily-guessed
password ]]>
</NAME>
<!-- *漏洞名称： -->
<NO CVE="NONE" CNVD="NONE" MS="NONE" O
THER="NONE"/>
<!-- CVE="CVE编号" CNVD="CNVD编号" MS="微软编号" O
THER="其他编号" -->
<VULTYPE>弱口令</VULTYPE>
<!-- 漏洞类型：如缓冲区溢出、设置不当、弱口令、其他等等 -->
<RISK>高</RISK>
<!-- *风险情况：高、中、低、信息 -->
<SYNOPSIS>
<![CDATA[ It may be possible
to get access
to the remote host ]]>
</SYNOPSIS>
<!-- 漏洞简述： -->
<DESCRIPTION>
<![CDATA[
The remote version
of the Remote Desk
top Pro
tocol Server (TerminalService) is vulnerable
to a man-in-
the-middle (MiTM) attack.
The RDP ]]>
</DESCRIPTION>
<!-- *漏洞描述 -->
<SOLUTION>
<![CDATA[ - Force
the use
of SSL as a transport layer for this service if supported, or/and ]]>
</SOLUTION>
<!-- *解决方案/整改意见 -->
<VALIDATE>
<![CDATA[ XXXXX ]]>
</VALIDATE>
<!-- 证据 -->
<REFERENCE>
<![CDATA[ http://www.oxid.it/downloads/rdp-gbu.pdf ]]>
</REFERENCE>
<!-- 参考信息 -->
</VULNERABLITY>
<VULNERABLITY>
<NAME>
<![CDATA[ Terminal Services Encryption Level is Medium or Low ]]>
</NAME>
<!-- *漏洞名称： -->
<NO CVE="NONE" CNVD="NONE" MS="MS13-112" O
THER="NONE"/>
<!-- CVE="CVE编号" CNVD="CNVD编号" MS="微软编号" O
THER="其他编号" -->
<VULTYPE>设置不当</VULTYPE>
<!-- 漏洞类型：如缓冲区溢出、设置不当、弱口令、其他等等 -->
<RISK>中</RISK>
<SYNOPSIS>
<![CDATA[
The remote host is using weak cryp
tography. ]]>
</SYNOPSIS>
<DESCRIPTION>
<![CDATA[
The remote Terminal Services service is not configured
to use
strong cryp
tography.xxxxxxxxxxxxxxxxxxxxx ]]>
</DESCRIPTION>
<SOLUTION>
<![CDATA[ -
Change RDP encryption level
to one
of :xxxxxxxxxxxxxxxxxx ]]>
</SOLUTION>
<VALIDATE>
<![CDATA[ XXXXX ]]>
</VALIDATE>
<!-- 证据 -->
<REFERENCE>
<![CDATA[
The terminal services encryption level is set
to : ]]>
</REFERENCE>
</VULNERABLITY>
</DATA>
</HOST>
<HOST IP="102.168.100.11">
<PORT>1433</PORT>
<DBTYPE>Micros
oft SQL Server</DBTYPE>
<DBVERSION>Micros
oft SQL Server 2008 R2</DBVERSION>
<DATA>
<VULNERABLITY>
<NAME>
<![CDATA[ Easily-guessed
password ]]>
</NAME>
<!-- *漏洞名称： -->
<NO CVE="NONE" CNVD="NONE" MS="NONE" O
THER="NONE"/>
<!-- CVE="CVE编号" CNVD="CNVD编号" MS="微软编号" O
THER="其他编号" -->
<VULTYPE>弱口令</VULTYPE>
<!-- 漏洞类型：如缓冲区溢出、设置不当、弱口令、其他等等 -->
<CVSS>6.4</CVSS>
<!-- 通用漏洞评分： -->
<RISK>高</RISK>
<!-- *风险情况：高、中、低、信息 -->
<SYNOPSIS>
<![CDATA[ It may be possible
to get access
to the remote host ]]>
</SYNOPSIS>
<!-- 漏洞简述： -->
<DESCRIPTION>
<![CDATA[
The remote version
of the Remote Desk
top Pro
tocol Server (TerminalService) is vulnerable
to a man-in-
the-middle (MiTM) attack.
The RDP ]]>
</DESCRIPTION>
<!-- *漏洞描述 -->
<SOLUTION>
<![CDATA[ - Force
the use
of SSL as a transport layer for this service if supported, or/and ]]>
</SOLUTION>
<!-- *解决方案/整改意见 -->
<VALIDATE>
<![CDATA[ XXXXX ]]>
</VALIDATE>
<!-- 证据 -->
<REFERENCE>
<![CDATA[ http://www.oxid.it/downloads/rdp-gbu.pdf ]]>
</REFERENCE>
<!-- 参考信息 -->
</VULNERABLITY>
<VULNERABLITY>
<NAME>
<![CDATA[ Terminal Services Encryption Level is Medium or Low ]]>
</NAME>
<NO CVE="NONE" CNVD="NONE" MS="MS13-112" O
THER="NONE"/>
<!-- CVE="CVE编号" CNVD="CNVD编号" MS="微软编号" O
THER="其他编号" -->
<VULTYPE>弱口令</VULTYPE>
<!-- 漏洞类型：如缓冲区溢出、设置不当、弱口令、其他等等 -->
<CVSS>6.4</CVSS>
<!-- 通用漏洞评分： -->
<RISK>中</RISK>
<SYNOPSIS>
<![CDATA[
The remote host is using weak cryp
tography. ]]>
</SYNOPSIS>
<DESCRIPTION>
<![CDATA[
The remote Terminal Services service is not configured
to use
strong cryp
tography.xxxxxxxxxxxxxxxxxxxxx ]]>
</DESCRIPTION>
<SOLUTION>
<![CDATA[ -
Change RDP encryption level
to one
of :xxxxxxxxxxxxxxxxxx ]]>
</SOLUTION>
<VALIDATE>
<![CDATA[ XXXXX ]]>
</VALIDATE>
<!-- 证据 -->
<REFERENCE>
<![CDATA[
The terminal services encryption level is set
to : ]]>
</REFERENCE>
</VULNERABLITY>
</DATA>
</HOST>
</SCANDATA>
<SCANDATA TYPE="WEB">
<HOST WEB="HTTP:\\WWW.TEST.COM">
<WEBSERVERBANNER>Apache
tomcat</WEBSERVERBANNER>
<!-- Web Server Banner信息， -->
<SERVERVERSION>Micros
oft
Windows 2008 R2</SERVERVERSION>
<!-- 服务器信息 -->
<TECHNOLOGIES>JSP</TECHNOLOGIES>
<!-- 使用语言 -->
<DATA>
<VULNERABLITY>
<NAME>
<![CDATA[ SQL注入漏洞 ]]>
</NAME>
<!-- *漏洞名称： -->
<NO CVE="NONE" CNVD="NONE" MS="NONE" O
THER="NONE"/>
<!-- CVE="CVE编号" CNVD="CNVD编号" MS="微软编号" O
THER="其他编号" -->
<VULTYPE>注入类</VULTYPE>
<!-- 漏洞类型：如注入类、跨站脚本类、信息泄露类、弱口令/默认口令类、系统/服务漏洞类、权限/配置设置不当类、产品漏洞类、其他类 -->
<RISK>高</RISK>
<!-- *风险情况：高、中、低、信息 -->
<SYNOPSIS>
<![CDATA[ It may be possible
to get access
to the remote host ]]>
</SYNOPSIS>
<!-- 漏洞简述： -->
<DESCRIPTION>
<![CDATA[
The remote version
of the Remote Desk
top Pro
tocol Server (TerminalService) is vulnerable
to a man-in-
the-middle (MiTM) attack.
The RDP ]]>
</DESCRIPTION>
<!-- *漏洞描述 -->
<SOLUTION>
<![CDATA[ - Force
the use
of SSL as a transport layer for this service if supported, or/and ]]>
</SOLUTION>
<!-- *解决方案/整改意见 -->
<VALIDATE>
<![CDATA[ XXXXX ]]>
</VALIDATE>
<!-- 证据 -->
<REFERENCE>
<![CDATA[ http://www.oxid.it/downloads/rdp-gbu.pdf ]]>
</REFERENCE>
<!-- 参考信息 -->
<DETAILS>
<URL URL="HTTP:\\WWW.TEST.COM?DETAILS=100">
<!-- *存在漏洞的url -->
<TYPE>STRING</TYPE>
<!-- 类型（string类型、int类型、search类型、反射性、存储型等等） -->
<PARAMETER>
<![CDATA[ DETAILS=100' AND '1'='1 ]]>
</PARAMETER>
<!-- 存在漏洞的参数（可带测试脚本） -->
<REQUEST>
<![CDATA[ GET /preSysApp/global/js/validate/depends/pro
totype.js HTTP/1.1 Pragma: no-cache Cache-Control: no-cache ]]>
</REQUEST>
<!-- 测试发送的request -->
<RESPONSE>
<!-- 接收的request -->
<![CDATA[ xxxxxxxxxxxxxxxxxx ]]>
</RESPONSE>
</URL>
<URL URL="HTTP:\\WWW.TEST.COM?id=120">
<!-- *存在漏洞的url -->
<TYPE>INT</TYPE>
<!-- 类型（string类型、int类型、search类型、反射性、存储型等等） -->
<PARAMETER>
<![CDATA[ ID=100 AND 1=1 ]]>
</PARAMETER>
<!-- 存在漏洞的参数（可带测试脚本） -->
<REQUEST>
<![CDATA[ GET /preSysApp/global/js/validate/depends/pro
totype.js HTTP/1.1 Pragma: no-cache Cache-Control: no-cache ]]>
</REQUEST>
<!-- 测试发送的request -->
<RESPONSE>
<![CDATA[ xxxxxxxxxxxxxxxxxx ]]>
</RESPONSE>
<!-- 接收的request -->
</URL>
</DETAILS>
</VULNERABLITY>
<VULNERABLITY>
<NAME>
<![CDATA[ 跨站脚本 ]]>
</NAME>
<!-- *漏洞名称： -->
<NO CVE="NONE" CNVD="NONE" MS="NONE" O
THER="NONE"/>
<!-- CVE="CVE编号" CNVD="CNVD编号" MS="微软编号" O
THER="其他编号" -->
<VULTYPE>跨站脚本类</VULTYPE>
<!-- 漏洞类型：如注入类、跨站脚本类、信息泄露类、弱口令/默认口令类、系统/服务漏洞类、权限/配置设置不当类、产品漏洞类、其他类 -->
<RISK>高</RISK>
<!-- *风险情况：高、中、低、信息 -->
<SYNOPSIS>
<![CDATA[ It may be possible
to get access
to the remote host ]]>
</SYNOPSIS>
<!-- 漏洞简述： -->
<DESCRIPTION>
<![CDATA[
The remote version
of the Remote Desk
top Pro
tocol Server (TerminalService) is vulnerable
to a man-in-
the-middle (MiTM) attack.
The RDP ]]>
</DESCRIPTION>
<!-- *漏洞描述 -->
<SOLUTION>
<![CDATA[ - Force
the use
of SSL as a transport layer for this service if supported, or/and ]]>
</SOLUTION>
<!-- *解决方案/整改意见 -->
<VALIDATE>
<![CDATA[ XXXXX ]]>
</VALIDATE>
<!-- 证据 -->
<REFERENCE>
<![CDATA[ http://www.oxid.it/downloads/rdp-gbu.pdf ]]>
</REFERENCE>
<!-- 参考信息 -->
<DETAILS>
<URL URL="HTTP:\\WWW.TEST.COM?DETAILS=100">
<!-- *存在漏洞的url -->
<TYPE>反射性</TYPE>
<!-- 类型（string类型、int类型、search类型、反射性、存储型等等） -->
<PARAMETER>
<![CDATA[ DETAILS=100%20%3C%73%63%72%69%70%3E%61%6C%65%72%74%28%31%29%3C%2F%73%63%72%69%70%74%3E ]]>
</PARAMETER>
<!-- 存在漏洞的参数（可带测试脚本） -->
<REQUEST>
<![CDATA[ GET /preSysApp/global/js/validate/depends/pro
totype.js HTTP/1.1 Pragma: no-cache Cache-Control: no-cache ]]>
</REQUEST>
<!-- 测试发送的request -->
<RESPONSE>
<!-- 接收的request -->
<![CDATA[ xxxxxxxxxxxxxxxxxx ]]>
</RESPONSE>
</URL>
</DETAILS>
</VULNERABLITY>
</DATA>
</HOST>
</SCANDATA>
</REPORT>生成的xml为次格式
扫一扫
1529
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
