Service detection : X Display Manager Control Protocol (XDMCP) Detection

Búsqueda de Vulnerabilidad		Buscar 324607 Descripciones CVE y 145615 Descripciones de Pruebas, accesos 10,000+ referencias cruzadas.
	Pruebas CVE Todos

ID de Prueba: 1.3.6.1.4.1.25623.1.0.10891

Categoría: Service detection

Título: X Display Manager Control Protocol (XDMCP) Detection

Resumen: The XDMCP service is running on the remote host.

Descripción: Summary:
The XDMCP service is running on the remote host.

Vulnerability Insight:
The login and password for XDMCP is transmitted in plaintext.

This makes the system vulnerable to Man-in-the-middle attacks, making it easy
for an attacker to steal the credentials of a legitimate user by impersonating
the XDMCP server. In addition to this, since XDMCP is not a ciphered protocol,
an attacker has an easier time capturing the keystrokes entered by the user.

Solution:
XDMCP should either be disabled or limited in the machines which
may access the service.

CVSS Score:
0.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:N

Copyright Copyright (C) 2005 Pasi Eronen

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.
Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.

ID de Prueba:	1.3.6.1.4.1.25623.1.0.10891
Categoría:	Service detection
Título:	X Display Manager Control Protocol (XDMCP) Detection
Resumen:	The XDMCP service is running on the remote host.
Descripción:	Summary: The XDMCP service is running on the remote host. Vulnerability Insight: The login and password for XDMCP is transmitted in plaintext. This makes the system vulnerable to Man-in-the-middle attacks, making it easy for an attacker to steal the credentials of a legitimate user by impersonating the XDMCP server. In addition to this, since XDMCP is not a ciphered protocol, an attacker has an easier time capturing the keystrokes entered by the user. Solution: XDMCP should either be disabled or limited in the machines which may access the service. CVSS Score: 0.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:N
Copyright	Copyright (C) 2005 Pasi Eronen