From: Morgan, Andy (Andy.Morgan@agiliti.com)
Date: Tue Sep 16 2003 - 10:36:50 EDT
VNC uses port 5800 and 5900 not 58000
afm
-----Original Message-----
From: Joe Blatz [mailto:sd_wireless@yahoo.com]
Sent: Tuesday, September 16, 2003 7:55 AM
To: Stephen de Vries; pen-test@securityfocus.com
Subject: Re: Port 58000
I doubt I'm the first to reply, but that's VNC.
--- Stephen de Vries <stephen.devries@dcode.net>
wrote:
>
> Hi all,
>
> I'm seeing some strange behaviour on a host I'm
> pentesting. It's a linux
> host with port 25,443 and 58000 open. When
> connection to port 58000 the
> service responds with:
> eB103-uOS R4B11
>
> and then closes the connection. Port 443 is not
> SSL, it accepts a string
> as input and closes the connection after the first
> carriage return lf. It
> seems strange and suspicious behaviour, any ideas ?
>
>
> Stephen.
>
>
>
>
---------------------------------------------------------------------------
> FREE Trial!
> New for security consultants and in-house pros:
> FOUNDSTONE PROFESSIONAL
> and PROFESSIONAL TL software. Fast, reliable
> vulnerability assessment
> technology powered by the award-winning FoundScan
> engine. Try it free for 21 days at:
>
http://www.securityfocus.com/sponsor/Foundstone_pen-test_030825
>
----------------------------------------------------------------------------
>
=====
I dreamed the police heard everything I thought ... what then? Well I went to court and the judge's name was ... Ashcroft
-- John Prine, "Illegal Smile" as performed in Houston 12.06.02
__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com
---------------------------------------------------------------------------
FREE Trial!
New for security consultants and in-house pros: FOUNDSTONE PROFESSIONAL
and PROFESSIONAL TL software. Fast, reliable vulnerability assessment
technology powered by the award-winning FoundScan engine. Try it free for 21 days at: http://www.securityfocus.com/sponsor/Foundstone_pen-test_030825
----------------------------------------------------------------------------
--- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.518 / Virus Database: 316 - Release Date: 9/11/2003 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.518 / Virus Database: 316 - Release Date: 9/11/2003 --------------------------------------------------------------------------- FREE Trial! New for security consultants and in-house pros: FOUNDSTONE PROFESSIONAL and PROFESSIONAL TL software. Fast, reliable vulnerability assessment technology powered by the award-winning FoundScan engine. Try it free for 21 days at: http://www.securityfocus.com/sponsor/Foundstone_pen-test_030825 ----------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:40 EDT