![]() |
Inicial ▼ Bookkeeping
Online ▼ Auditorias ▼
DNS
Administrado ▼
Acerca de DNS
Ordenar/Renovar
Preguntas Frecuentes
AUP
Dynamic DNS Clients
Configurar Dominios Dynamic DNS Update Password Monitoreo
de Redes ▼
Enterprise
Avanzado
Estándarr
Prueba
Preguntas Frecuentes
Resumen de Precio/Funciones
Ordenar
Muestras
Configure/Status Alert Profiles | ||
ID de Prueba: | 1.3.6.1.4.1.25623.1.0.10407 |
Categoría: | Service detection |
Título: | X Server Detection |
Resumen: | This plugin detects X Window servers.;; X11 is a client - server protocol. Basically, the server is in charge of the; screen, and the clients connect to it and send several requests like drawing; a window or a menu, and the server sends events back to the clients, such as; mouse clicks, key strokes, and so on...;; An improperly configured X server will accept connections from clients from; anywhere. This allows an attacker to make a client connect to the X server to; record the keystrokes of the user, which may contain sensitive information,; such as account passwords.; This can be prevented by using xauth, MIT cookies, or preventing; the X server from listening on TCP (a Unix sock is used for local; connections) |
Descripción: | Summary: This plugin detects X Window servers. X11 is a client - server protocol. Basically, the server is in charge of the screen, and the clients connect to it and send several requests like drawing a window or a menu, and the server sends events back to the clients, such as mouse clicks, key strokes, and so on... An improperly configured X server will accept connections from clients from anywhere. This allows an attacker to make a client connect to the X server to record the keystrokes of the user, which may contain sensitive information, such as account passwords. This can be prevented by using xauth, MIT cookies, or preventing the X server from listening on TCP (a Unix sock is used for local connections) CVSS Score: 0.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:N |
Copyright | Copyright (C) 2005 John Jackson |
Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |