IBM DeveloperWorks NCP 2.1 Information Disclosure

2012-06-30T00:00:00
ID PACKETSTORM:114372
Type packetstorm
Reporter BugsNotHugs
Modified 2012-06-30T00:00:00

Description

                                        
                                            `  
http://www.ibm.com/developerworks/systems/articles/free_tools/index.html  
  
Can visit ncp pages and get info without authentication!  
  
http://target:8282/  
  
gives version  
  
http://target:8282/real/lsconf.html  
  
detailed config info including:  
System Model  
Machine Serial Number  
Processor Type  
Number of Processors  
Processor Clock Speed  
CPU Type  
Kernel Type  
LAPR Info  
Memory Size  
Firmware Version  
Console Login (if enabled or not)  
Auto Restart status  
Host Name  
Gateway IP  
Name Server  
Domain Name  
Volume Group Info  
  
http://target:8282/real.html  
  
Graphs for host  
File System Use  
CPU Utilisation (User+System)  
`