Vulnerabilities Trend Report

Vulnerabilities Trend Report
Report Date: 10/16/98 16:35:05

Report Description:

This report presents a trend in workstation security vulnerabilities, comparing the workstation's vulnerabilities between two or more scans. Each row of the table represents a different scan, while the columns show vulnerabilities from that scan.

Vulnerability Trends:

Scan

Date

Status

High

Med

Low

Policy:	Heavy
Comment:

10/14/98 11:46:53

Policy:	Heavy
Comment:

10/14/98 11:14:44

Policy:

Heavy

Internet Protocol:

Service Scan:

Scan ports:

Service port:

Max scan:

Scan always:

Off

FTP:

Check CD dot dot bug:

AllFiles:

CheckSite:

CheckDir:

Browser:

Internet Explorer:

Netscape Navigator:

Operating System:

Denial of Service:

OS Version:

Registry Settings:

Auto Login:

Base Key Permissions:

Clear PageFile:

DCOM RunAs:

DCOM:

GetAdmin:

IP Routing:

LM Auth:

LSA Key:

Minimum of default AutoRun drives:

Multihomed:

Multiple Protocols:

OS/2 enabled:

Performance Monitor:

POSIX enabled:

RAS:

RAM Disk AutoRun:

reg File Type Association:

Remote Registry Access:

Server Operations:

SNMP NetBIOS:

SNMP Public:

WinKey Permissions:

User checks:

Audit policies:

Failure:

Account Management:

Detailed Tracking:

Logon:

Object:

Policy Change:

Privilege Use:

System:

Success:

Account Management:

Detailed Tracking:

Logon:

Object:

Policy Change:

Privilege Use:

System:

Flag administrator if named "Administrator":

Guest account if enabled:

Password checks:

Blank password:

No password:

Passwords in dictionary:

Password is user's name:

Password never expires:

RAS callback number change:

RAS dial in allowed:

Days dormant:

365

Share Checks:

Flag all Shares:

Guest or Everyone write access:

Insecure file system shared:

NTFS share with Guest or Everyone write access:

NetBIOS:

Repair dir:

Service list:

NetBIOS browser:

Application:

MS Office:

Virus Scanner:

PWS:

Baselines:

Registry Scan:

Reset:

Off

Audit settings:

Off

Ownership:

Off

Permissions:

Off

Value data:

Registry keys:

HKCR\

File Scan:

Reset:

Off

Attributes:

Off

Audit settings (NTFS only):

Off

Content:

Ownership (NTFS only):

Off

Permissions (NTFS only):

Off

Extensions:

exe
dll
sys
ocx
scr
class
drv
cpl
vxd
pl
bas
com

Directories:

C:\WINNT\System32

Services:

Reset:

Off

Application Services:

Driver Services:

Processes:

Reset:

Off

Common Run Key in Registry:

Common Startup Folder:

Load:

Run:

User-specific Run Key in Registry:

User-specific Startup Folder:

User Scan:

Reset:

Off

Group membership:

Logon settings:

RAS settings:

User rights:

Group Scan:

Reset:

Off

Group Rights:

Users in group:

Share Scan:

Reset:

Off

Hidden shares:

Permissions of shared NTFS folder:

Share permissions:

Shared printers:

Remote Access:

Modems:

pcANYWHERE32:

Carbon Copy 32:

Remotely Possible/32:

LapLink:

RAS:

Passwords:

Password Settings:

Policy:

Heavy

Internet Protocol:

Service Scan:

Scan ports:

Service port:

Max scan:

Scan always:

Off

FTP:

Check CD dot dot bug:

AllFiles:

CheckSite:

CheckDir:

Browser:

Internet Explorer:

Netscape Navigator:

Operating System:

Denial of Service:

OS Version:

Registry Settings:

Auto Login:

Base Key Permissions:

Clear PageFile:

DCOM RunAs:

DCOM:

GetAdmin:

IP Routing:

LM Auth:

LSA Key:

Minimum of default AutoRun drives:

Multihomed:

Multiple Protocols:

OS/2 enabled:

Performance Monitor:

POSIX enabled:

RAS:

RAM Disk AutoRun:

reg File Type Association:

Remote Registry Access:

Server Operations:

SNMP NetBIOS:

SNMP Public:

WinKey Permissions:

User checks:

Audit policies:

Failure:

Account Management:

Detailed Tracking:

Logon:

Object:

Policy Change:

Privilege Use:

System:

Success:

Account Management:

Detailed Tracking:

Logon:

Object:

Policy Change:

Privilege Use:

System:

Flag administrator if named "Administrator":

Guest account if enabled:

Password checks:

Blank password:

No password:

Passwords in dictionary:

Password is user's name:

Password never expires:

RAS callback number change:

RAS dial in allowed:

Days dormant:

365

Share Checks:

Flag all Shares:

Guest or Everyone write access:

Insecure file system shared:

NTFS share with Guest or Everyone write access:

NetBIOS:

Repair dir:

Service list:

NetBIOS browser:

Application:

MS Office:

Virus Scanner:

PWS:

Baselines:

Registry Scan:

Reset:

Audit settings:

Off

Ownership:

Off

Permissions:

Off

Value data:

Registry keys:

HKCR\

File Scan:

Reset:

Attributes:

Off

Audit settings (NTFS only):

Off

Content:

Ownership (NTFS only):

Off

Permissions (NTFS only):

Off

Extensions:

exe
dll
sys
ocx
scr
class
drv
cpl
vxd
pl
bas
com

Directories:

C:\WINNT\System32

Services:

Reset:

Application Services:

Driver Services:

Processes:

Reset:

Common Run Key in Registry:

Common Startup Folder:

Load:

Run:

User-specific Run Key in Registry:

User-specific Startup Folder:

User Scan:

Reset:

Group membership:

Logon settings:

RAS settings:

User rights:

Group Scan:

Reset:

Group Rights:

Users in group:

Share Scan:

Reset:

Hidden shares:

Permissions of shared NTFS folder:

Share permissions:

Shared printers:

Remote Access:

Modems:

pcANYWHERE32:

Carbon Copy 32:

Remotely Possible/32:

LapLink:

RAS:

Passwords:

Password Settings:

Vulnerabilities Trend Report Report Date: 10/16/98 16:35:05

Vulnerabilities Trend Report
Report Date: 10/16/98 16:35:05