I currently have a machine (set by another person) that has (according to nmap) open ports as:
- FreeBSD ftpd 6.00LS where anonymous login is possible
- OpenSSH 4.5p1 (FreeBSD 20061110; protocol 2.0)
- FreeBSD fingerd
- Apache httpd 2.2.6 ((FreeBSD) DAV/2 PHP/4.4.7 with Suhosin-Patch mod_ssl/2.2.6 OpenSSL/0.9.8e) | http-methods: GET HEAD POST OPTIONS TRACE
- cvs pserver
- mysql (unauthorized).
The OS is FreeBSD 8.1-release.
I use a VPN to connect to my server, and every time I use vulnerability scanners, the connection freezes. Not sure if this is due to the size of packets, but they do not work. Acunetix web scanner does work, but it is irrelevant with what I am trying to test, as there is no web application on the server. I am assuming that the machine is set to detect vulnerability scanners, so I cannot use vulnerability scanners to check how the machine would be vulnerable.
Is there any vulnerability that a hacker might use to gain the command shell of the system?
Also, would there be any way to gain the command shell of the system using finger (command finger @my-machine-IP-address says access denied.)
Add: what does "MySQL (unauthorized)" mean?