Service detection : X Display Manager Control Protocol (XDMCP) Detection

Anfälligkeitssuche		Suche in 324607 CVE Beschreibungen und 145615 Test Beschreibungen, Zugriff auf 10,000+ Quellverweise.
	Tests CVE Alle

Test Kennung: 1.3.6.1.4.1.25623.1.0.10891

Kategorie: Service detection

Titel: X Display Manager Control Protocol (XDMCP) Detection

Zusammenfassung: The XDMCP service is running on the remote host.

Beschreibung: Summary:
The XDMCP service is running on the remote host.

Vulnerability Insight:
The login and password for XDMCP is transmitted in plaintext.

This makes the system vulnerable to Man-in-the-middle attacks, making it easy
for an attacker to steal the credentials of a legitimate user by impersonating
the XDMCP server. In addition to this, since XDMCP is not a ciphered protocol,
an attacker has an easier time capturing the keystrokes entered by the user.

Solution:
XDMCP should either be disabled or limited in the machines which
may access the service.

CVSS Score:
0.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:N

Copyright Copyright (C) 2005 Pasi Eronen

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.
Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

Test Kennung:	1.3.6.1.4.1.25623.1.0.10891
Kategorie:	Service detection
Titel:	X Display Manager Control Protocol (XDMCP) Detection
Zusammenfassung:	The XDMCP service is running on the remote host.
Beschreibung:	Summary: The XDMCP service is running on the remote host. Vulnerability Insight: The login and password for XDMCP is transmitted in plaintext. This makes the system vulnerable to Man-in-the-middle attacks, making it easy for an attacker to steal the credentials of a legitimate user by impersonating the XDMCP server. In addition to this, since XDMCP is not a ciphered protocol, an attacker has an easier time capturing the keystrokes entered by the user. Solution: XDMCP should either be disabled or limited in the machines which may access the service. CVSS Score: 0.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:N
Copyright	Copyright (C) 2005 Pasi Eronen