Simple security question

[Joel Hammer]

Yes.

Port 6000 allows anyone to attach to your X-server.
xdmcp also allows people to get a login screen to your box.
Anybody could dump stuff to your printer, too.

I do not know what is listening to 32768. I do not know what wdm is.

If you want, I could run nmap against your server for your. This stuff
is all easy to hide from the world, BTW.

Joel

Sun, Mar 16, 2003 at 06:45:09PM -0700, Collins Richey wrote:
> Simple security question.  I don't do anything special for security, but I got curious enough to issue `lsof -i` just for grins.
> 
> 
> COMMAND  PID USER   FD   TYPE DEVICE SIZE NODE NAME
> lpd      997   lp    6u  IPv4   2805       TCP *:printer (LISTEN)
> wdm     1146 root    4u  IPv4   3243       UDP *:xdmcp 
> wdm     1146 root    5u  IPv4   3244       TCP *:32768 (LISTEN)
> X       1149 root    1u  IPv4   3249       TCP *:6000 (LISTEN)
> wdm     1150 root    5u  IPv4   3244       TCP *:32768 (LISTEN)
> 
> Given the few ports that are actually listening, do I have much to worry about?
> 
> --
> Collins
> _______________________________________________
> Linux-users mailing list
> Linux-users at linux-sxs.org
> Unsubscribe/Suspend/Etc -> http://www.linux-sxs.org/mailman/listinfo/linux-users