The rexec service is running
🗓️ 29 Sep 2020 00:00:00Reported by Copyright (C) 2020 Greenbone AGType
openvas🔗 plugins.openvas.org👁 1326 Views
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
| CVE-1999-0618 | 4 Feb 200005:00 | – | cve | |
| CVE-1999-0618 | 4 Feb 200005:00 | – | cvelist | |
| EUVD-1999-0601 | 7 Oct 202500:30 | – | euvd | |
| CVE-1999-0618 | 1 Jan 199905:00 | – | nvd | |
| PT-1999-1231 · Rexec · Rexec | 1 Jan 199900:00 | – | ptsecurity | |
| rexecd Service Detection | 31 Aug 199900:00 | – | nessus | |
| CVE-1999-0618 | 21 May 202518:23 | – | redhatcve |
# SPDX-FileCopyrightText: 2020 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.100111");
script_version("2023-09-12T05:05:19+0000");
script_tag(name:"last_modification", value:"2023-09-12 05:05:19 +0000 (Tue, 12 Sep 2023)");
script_tag(name:"creation_date", value:"2020-09-29 10:10:42 +0000 (Tue, 29 Sep 2020)");
script_tag(name:"cvss_base", value:"10.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
script_tag(name:"qod_type", value:"remote_banner");
script_tag(name:"solution_type", value:"Mitigation");
script_cve_id("CVE-1999-0618");
script_name("The rexec service is running");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2020 Greenbone AG");
script_family("Useless services");
script_dependencies("rexecd.nasl");
script_mandatory_keys("rexec/detected");
script_tag(name:"summary", value:"This remote host is running a rexec service.");
script_tag(name:"vuldetect", value:"Checks whether an rexec service is exposed on the target
host.");
script_tag(name:"insight", value:"rexec (remote execution client for an exec server) has the same
kind of functionality that rsh has: you can execute shell commands on a remote computer.
The main difference is that rexec authenticate by reading the username and password *unencrypted*
from the socket.");
script_tag(name:"solution", value:"Disable the rexec service and use alternatives like SSH
instead.");
exit(0);
}
include( "host_details.inc" );
if( ! port = get_kb_item( "rexec/port" ) ) exit( 0 );
report = "The rexec service was detected on the target system.";
security_message( data: report, port: port );
exit( 0 );
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Sep 2023 00:00Current
6.8Medium risk
Vulners AI Score6.8
CVSS 210
EPSS0.01908