PT0-002 · Question #555
A vulnerability scan returned the following results: Which of the following best describes the meaning of this output?
The correct answer is D. Connecting to the host using a null session allows listing of the share names on the host. The scan results show that the Windows shares (print$, c:\FileShare\Accounting, and c:\temp) on the target system (10.56.10.66) were enumerated without any authentication. This indicates that the system allows null session connections, which are unauthenticated SMB connections…
Question
A vulnerability scan returned the following results:
Which of the following best describes the meaning of this output?
Exhibit
Options
- ANo CVE is present, so this is a false positive caused by Apache running on a Windows server.
- BAn unknown bug is in an Apache server with no Bugtraq ID.
- CWindows Defender has a known exploit that must be resolved or patched.
- DConnecting to the host using a null session allows listing of the share names on the host.
How the community answered
(25 responses)- A4% (1)
- B4% (1)
- D92% (23)
Explanation
The scan results show that the Windows shares (print$, c:\FileShare\Accounting, and c:\temp) on the target system (10.56.10.66) were enumerated without any authentication. This indicates that the system allows null session connections, which are unauthenticated SMB connections. These connections enable an attacker to list shared resources and potentially gather additional information about the host. The fact that no CVE or Bugtraq ID is listed suggests this is not an exploit or vulnerability in Apache but rather a misconfiguration in how the Windows shares are secured.
Topics
Community Discussion
No community discussion yet for this question.