Test ID:	1.3.6.1.4.1.25623.1.0.10640
Category:	Misc.
Title:	Kerberos PingPong attack
Summary:	NOSUMMARY
Description:	Description: The remote host is running a kerberos server, which seems to be vulnerable to a 'ping-pong' attack. When contacted on the UDP port, this service always respond, even to malformed requests. An easy attack is 'ping-pong' in which an attacker spoofs a packet between two machines running this service. This will cause them to spew characters at each other, slowing the machines down and saturating the network. Solution : Disable this service if you do not use it. Risk factor : Low
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-1999-0103 Cert/CC Advisory: CA-96.01.UDP_service_denial https://ics-cert.us-cert.gov/advisories/ICSMA-18-233-01 XForce ISS Database: chargen XForce ISS Database: chargen-patch XForce ISS Database: echo
Copyright	This script is Copyright (C) 2001 Renaud Deraison

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.