Advertisement

08.26.2008 at 10:30PM PDT, ID: 23680982
[x]
Attachment Details

vulnerabilities of my website or server

[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!
9.0
Zone:

Networking Security Vulnerabilities

vulnerabilities of my website or server

hello ..
i know about scanning server .. and i read it ..
i have one program that name "nmap" working in linux and windows

i made scan in my server .. and i get this things ..
is my server able to hacking ? if the answer yes .. how ? if the answer No. Why?

take  a look of this list of my scan using " nmap " scanner
Notice: my Server is running in Linux

and tell me about the port opend !! able to hacking ?
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:

Starting Nmap 4.68 ( http://nmap.org ) at 2008-08-19 04:00 Arab Standard Time
Initiating Ping Scan at 04:00
Scanning xx.xxx.xxx.10 [2 ports]
Completed Ping Scan at 04:00, 1.81s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 04:00
Completed Parallel DNS resolution of 1 host. at 04:00, 0.99s elapsed
Initiating SYN Stealth Scan at 04:00
Scanning host.mydomain.com (xx.xxx.xxx.10) [1715 ports]
Discovered open port 80/tcp on xx.xxx.xxx.10
Discovered open port 25/tcp on xx.xxx.xxx.10
Discovered open port 443/tcp on xx.xxx.xxx.10
Discovered open port 53/tcp on xx.xxx.xxx.10
Discovered open port 1214/tcp on xx.xxx.xxx.10
Discovered open port 465/tcp on xx.xxx.xxx.10
Discovered open port 8888/tcp on xx.xxx.xxx.10
Discovered open port 110/tcp on xx.xxx.xxx.10
Discovered open port 993/tcp on xx.xxx.xxx.10
Discovered open port 5190/tcp on xx.xxx.xxx.10
Discovered open port 1025/tcp on xx.xxx.xxx.10
Discovered open port 5192/tcp on xx.xxx.xxx.10
Discovered open port 119/tcp on xx.xxx.xxx.10
Discovered open port 3306/tcp on xx.xxx.xxx.10
Discovered open port 5191/tcp on xx.xxx.xxx.10
Discovered open port 8443/tcp on xx.xxx.xxx.10
Discovered open port 6588/tcp on xx.xxx.xxx.10
Discovered open port 995/tcp on xx.xxx.xxx.10
Discovered open port 5193/tcp on xx.xxx.xxx.10
Discovered open port 3128/tcp on xx.xxx.xxx.10
Discovered open port 8000/tcp on xx.xxx.xxx.10
Discovered open port 81/tcp on xx.xxx.xxx.10
Discovered open port 85/tcp on xx.xxx.xxx.10
Discovered open port 143/tcp on xx.xxx.xxx.10
Discovered open port 8080/tcp on xx.xxx.xxx.10
Discovered open port 26/tcp on xx.xxx.xxx.10
Completed SYN Stealth Scan at 04:02, 113.31s elapsed (1715 total ports)
Initiating Service scan at 04:02
Scanning 26 services on host.mydomain.com (xx.xxx.xxx.10)
Service scan Timing: About 38.46% done; ETC: 04:04 (0:00:59 remaining)
Service scan Timing: About 50.00% done; ETC: 04:06 (0:02:00 remaining)
Completed Service scan at 04:05, 176.81s elapsed (26 services on 1 host)
Initiating OS detection (try #1) against host.mydomain.com (xx.xxx.xxx.10)
Retrying OS detection (try #2) against host.mydomain.com (xx.xxx.xxx.10)
Initiating Traceroute at 04:06
xx.xxx.xxx.10: guessing hop distance at 18
Completed Traceroute at 04:06, 4.53s elapsed
Initiating Parallel DNS resolution of 20 hosts. at 04:06
Completed Parallel DNS resolution of 20 hosts. at 04:06, 16.50s elapsed
SCRIPT ENGINE: Initiating script scanning.
Initiating SCRIPT ENGINE at 04:06
SCRIPT ENGINE DEBUG: showHTMLTitle.nse: Default page is located at https://www.mydomain.com:8443/vz/cp/psa/frameset
Completed SCRIPT ENGINE at 04:06, 30.81s elapsed
Host host.mydomain.com (xx.xxx.xxx.10) appears to be up ... good.
Interesting ports on host.mydomain.com (xx.xxx.xxx.10):
Not shown: 1682 filtered ports
PORT      STATE  SERVICE             VERSION
20/tcp    closed ftp-data
21/tcp    closed ftp
22/tcp    closed ssh
25/tcp    open   smtp                Exim smtpd 4.69
|  SMTPcommands: EHLO host.mydomain.com Hello example.org [78.93.85.102], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, 250 HELP|_ HELP Commands supported:, , AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
26/tcp    open   smtp                Exim smtpd 4.69
|  SMTPcommands: EHLO host.mydomain.com Hello example.org [78.93.85.102], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, 250 HELP|_ HELP Commands supported:, , AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
37/tcp    closed time
53/tcp    open   domain              ISC BIND 9.2.4
|  zone-transfer:  |  mydomain.com.               SOA     ns1.mydomain.com. support.mydomain.com.  |  mydomain.com.               TXT    |  mydomain.com.               MX      1483215414.pamx1.hotmail.com.            |  mydomain.com.               NS      ns1.mydomain.com.                        |  mydomain.com.               NS      ns2.mydomain.com.                        |  mydomain.com.               A       xx.xxx.xxx.10                            |  chat.mydomain.com.          A       xx.xxx.xxx.10                            |  www.chat.mydomain.com.      A       xx.xxx.xxx.10                            |  cpanel.mydomain.com.        A       xx.xxx.xxx.10                            |  dreamsss.mydomain.com.      A       xx.xxx.xxx.10                            |  www.dreamsss.mydomain.com.  A       xx.xxx.xxx.10                            |  ftp.mydomain.com.           A       xx.xxx.xxx.10                            |  host.mydomain.com.          A       xx.xxx.xxx.10                            |  islam.mydomain.com.         A       xx.xxx.xxx.10                            |  www.islam.mydomain.com.     A       xx.xxx.xxx.10                            |  localhost.mydomain.com.     A       127.0.0.1                                |  mail.mydomain.com.          CNAME  |  ns1.mydomain.com.           A       xx.xxx.xxx.10                            |  ns2.mydomain.com.           A       xx.xxx.xxx.11                            |  webdisk.mydomain.com.       A       xx.xxx.xxx.10                            |  webmail.mydomain.com.       A       xx.xxx.xxx.10                            |  whm.mydomain.com.           A       xx.xxx.xxx.10                            |  www.mydomain.com.           CNAME  |_ mydomain.com.               SOA     ns1.mydomain.com. support.mydomain.com.  
80/tcp    open   http                Apache httpd
|_ robots.txt: is empty or has no disallowed entries
|_ HTML title: .... .......
81/tcp    open   hosts2-ns?
85/tcp    open   mit-ml-dev?
110/tcp   open   pop3                Courier pop3d
119/tcp   open   nntp?
143/tcp   open   imap                Courier Imapd (released 2005)
443/tcp   open   https?
|_ HTML title: Site doesn't have a title.
465/tcp   open   ssl/smtp            Exim smtpd 4.69
|_ SSLv2: server still supports SSLv2
993/tcp   open   ssl/imap            Courier Imapd (released 2005)
|_ SSLv2: server still supports SSLv2
995/tcp   open   ssl/pop3            Courier pop3d
|_ SSLv2: server still supports SSLv2
1025/tcp  open   NFS-or-IIS?
1214/tcp  open   fasttrack?
3128/tcp  open   squid-http?
3306/tcp  open   mysql               MySQL (unauthorized)
5190/tcp  open   aol?
5191/tcp  open   aol-1?
5192/tcp  open   aol-2?
5193/tcp  open   aol-3?
6588/tcp  open   analogx?
8000/tcp  open   http-alt?
8080/tcp  open   http-proxy?
8443/tcp  open   ssl/http            Apache httpd 2.0.46 ((Red Hat) mod_ssl/2.0.46 OpenSSL/0.9.7a)
|_ SSLv2: server still supports SSLv2
|_ HTML title:           VZPP Plesk - Login
8888/tcp  open   sun-answerbook?
61439/tcp closed netprowler-manager
61440/tcp closed netprowler-manager2
61441/tcp closed netprowler-sensor
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
SF-Port443-TCP:V=4.68%I=7%D=8/19%Time=48AA1BC5%P=i686-pc-windows-windows%r
SF:(SSLSessionReq,D6,"<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTM
SF:L\x202\.0//EN\">
<html><head>
<title>501\x20Method\x20Not\x20Implemen
SF:ted</title>
</head><body>
<h1>Method\x20Not\x20Implemented</h1>
<p>\
SF:x16\x03\x20to\x20/index\.html\x20not\x20supported\.<br\x20/>
</p>
</b
SF:ody></html>
");
Device type: general purpose|WAP|specialized|router|firewall|storage-misc|VoIP phone
Running (JUST GUESSING) : Linux 2.6.X|2.4.X (93%), FON Linux 2.6.X (93%), Linksys Linux 2.6.X|2.4.X (93%), Netgear Linux 2.6.X (93%), Infoblox NIOS 4.X (91%), MikroTik RouterOS 3.X (91%), Fortinet embedded (90%), Netgear embedded (90%)
Aggressive OS guesses: Linux 2.6.11 - 2.6.19 (93%), Linux 2.6.21 (93%), Linux 2.6.20 (93%), Linux 2.6.20 (Ubuntu, x86_64) (93%), Wireless broadband router (FON La Fonera, Linksys WAP54GL, or Netgear WGT634U) (OpenWrt, Linux 2.6.22) (93%), Linux 2.6.22 (92%), OpenWrt 0.9 (Linux 2.4.30) (92%), Infoblox NIOS 4.1r5 (91%), MikroTik RouterOS software router 3.0beta5 (91%), Linux 2.6.9 - 2.6.15 (90%)
No exact OS matches for host (test conditions non-ideal).
 
TRACEROUTE (using port 25/tcp)
HOP RTT    ADDRESS
1   2.00   192.168.1.1
2   559.00 anj.serversite1.net.sa (yyy.yyy.yyy.12)
3   559.00 yyy.yyy.yyy.193
4   559.00 yyy.yyy.yyy.201
5   560.00 84-235-110-209.igw.com.sa (84.235.110.209)
6   560.00 84-235-120-34.igw.com.sa (84.235.120.34)
7   699.00 sl-gw31-nyc-11-0-0.sprintlink.net (144.232.234.181)
8   699.00 sl-crs2-nyc-0-2-0-0.sprintlink.net (144.232.13.35)
9   699.00 sl-crs2-pen-0-8-3-0.sprintlink.net (144.232.20.97)
10  699.00 sl-crs2-rly-0-4-3-0.sprintlink.net (144.232.20.111)
11  736.00 sl-crs2-atl-0-5-2-0.sprintlink.net (144.232.20.174)
12  746.00 sl-st21-atl-1-0-0.sprintlink.net (144.232.18.135)
13  746.00 207.13.126.74
14  743.00 l3-atl-18.gnax.net (209.51.131.74)
15  636.00 vz4.nswebhost.com (63.247.86.90)
16  644.00 host.mydomain.com (xx.xxx.xxx.10)
 
Read data files from: D:\Nmap
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 360.645 seconds
           Raw packets sent: 5170 (231.008KB) | Rcvd: 153 (8732B)
Start your 7 day free trial to see this answer
Answered By: deadrop
Expert Since: 08/20/2008
Accepted Solutions: 18
Computer Expertise: Guru
deadrop has been an Expert for 4 months, during which he has posted 96 comments and answered 18 questions. deadrop is just one of 982 experts in the Networking Security Vulnerabilities Zone. 3 experts collaborated on this answer, which was graded an "A" by the asker.
 
 
20081119-EE-VQP-47 / EE_QW_2_20070628