Vulnerability Assessment and Management | Penetration Testing with BackBox

False positives

Now we have the substantial vulnerabilities report generated by OpenVAS for the target system. It is ready to be analyzed and we will be going through high-level and medium-level vulnerabilities we mentioned earlier. We will be commenting them all in order to be able to classify whether they are false positives or not.

The following is the list of high and medium vulnerabilities:

Port summary for 192.168.136.35

Service (Port)	Threat
domain (53/tcp)	High
ms-wbt-server (3389/tcp)	High
mysql (3306/tcp)	High
blackice-alerts (8082/tcp)	Medium
general/tcp	Medium
http (80/tcp)	Medium
sunproxyadmin (8081/tcp)	Medium

Let's go through a single high-level alert by summarizing the threat type with the associate common vulnerability scoring system (CVSS) and the further details given by the scan report.

High-level vulnerabilities:
- CVSS: 9.3, NVT: Dnsmasq Remote Denial of Service Vulnerability
- CVSS: 6.4, NVT: Microsoft RDP Server Private Key Information Disclosure Vulnerability...

Tech Concepts

Programming languages

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Penetration Testing with BackBox

By : Stefan Umit Uygur

Penetration Testing with BackBox

By: Stefan Umit Uygur

Overview of this book

False positives

Penetration Testing with BackBox

By : Stefan Umit Uygur

Penetration Testing with BackBox

By: Stefan Umit Uygur

Overview of this book

False positives

Confirmation

Buy this book with your credits?

Submit Your Feedback

Create a Free Account To Continue Reading

Sign in to activate your 7-day free access