+ Server: Apache/1.3.33 (Darwin) mod_ssl/2.8.24 OpenSSL/0.9.7l PHP/4.4.7
+ robots.txt contains 1 entry which should be manually viewed.
+ OSVDB-27487: Apache is vulnerable to XSS via the Expect header
+ Apache/1.3.33 appears to be outdated (current is at least Apache/2.2.14). Apache 1.3.41 and 2.0.63 are also current.
+ mod_ssl/2.8.24 appears to be outdated (current is at least 2.8.31) (may depend on server version)
+ OpenSSL/0.9.7l appears to be outdated (current is at least 0.9.8i) (may depend on server version)
+ Number of sections in the version string differ from those in the database, the server reports: php/4.4.7 while the database has: 5.2.11. This may cause false positives.
+ PHP/4.4.7 appears to be outdated (current is at least 5.2.11)
+ Allowed HTTP Methods: GET, HEAD, OPTIONS, TRACE, POST, PUT, DELETE, CONNECT, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE, LOCK, UNLOCK
+ OSVDB-397: HTTP method ('Allow' Header): 'PUT' method could allow clients to save files on the web server.
+ OSVDB-5646: HTTP method ('Allow' Header): 'DELETE' may allow clients to remove files on the web server.
+ HTTP method ('Allow' Header): 'CONNECT' may allow server to proxy client requests.
+ HTTP method ('Allow' Header): 'PROPFIND' may indicate DAV/WebDAV is installed. This may be used to get directory listings if indexing is allow but a default page exists.
+ HTTP method ('Allow' Header): 'PROPPATCH' indicates WebDAV is installed.
+ OSVDB-5647: HTTP method ('Allow' Header): 'MOVE' may allow clients to change file locations on the web server.
+ OSVDB-637: Enumeration of users is possible by requesting ~username (responds with 'Forbidden' for users, 'not found' for non-existent users).
+ ETag header found on server, inode: 14713395, size: 312, mtime: 0x47681d8e
+ ERROR: /cgi.cgi/fpsrvadm.exe returned an error: error reading HTTP response
+ ERROR: /index.php?download=/winnt/win.ini returned an error: error reading HTTP response
+ ERROR: /put/cgi-bin/putport.exe?SWAP&BOM&OP=none&Lang=en-US&PutHtml=../../../../../../../../etc/passwd returned an error: error reading HTTP response
+ ERROR: /openautoclassifieds/friendmail.php?listing=<script>alert(document.domain);</script> returned an error: error reading HTTP response
+ ERROR: /cgi.cgi/probecontrol.cgi?command=enable&username=cancer&password=killer returned an error: error reading HTTP response
+ OSVDB-3233: /mailman/listinfo: Mailman was found on the server.
+ OSVDB-3093: /webmail/src/read_body.php: This might be interesting... has been seen in web logs from an unknown scanner.
+ OSVDB-3268: /icons/: Directory indexing is enabled: /icons
+ OSVDB-3233: /icons/README: Apache default file found.