Plugin ID | 349 |
Plugin name | LCDproc server detection |
Plugin filename | lcdproc server detection.plugin |
Plugin filesize | 2411 bytes |
Plugin family | Misc. |
Plugin created name | Marc Ruef |
Plugin created email | marc.ruef at computec.ch |
Plugin created web | http://www.computec.ch |
Plugin created company | computec.ch |
Plugin created date | 2004/12/13 |
Plugin version | 1.0 |
Plugin protocol | tcp |
Plugin port | 13666 |
Plugin procedure detection | open|sleep|close|pattern_exists *connect LCDproc* |
Plugin detection accuracy | 85 |
Plugin comment | This script is Copyright (C) 2000 SecuriTeam (Noam Rathaus <noamr@securiteam.com>) |
Bug produced name | Omnipotent |
Bug produced web | http://lcdproc.omnipotent.net |
Bug affected | LCDproc server |
Bug not affected | Other solutions |
Bug vulnerability class | Configuration |
Bug description | LCDproc (http://lcdproc.omnipotent.net) is a system that is used to display system information and other data on an LCD display (or any supported display device, including curses or text). The LCDproc version 4.0 and above uses a client-server protocol, allowing anyone with access to the LCDproc server to modify the displayed content. |
Bug solution | Disable access to this service from outside by disabling access to TCP port 13666 (default port used). |
Bug fixing time | Approx. 30 minutes |
Bug exploit availability | Yes |
Bug remote | Yes |
Bug local | Yes |
Bug severity | Low |
Bug popularity | 6 |
Bug simplicity | 8 |
Bug impact | 6 |
Bug risk | 6 |
Bug Nessus risk | Low |
Bug check tools | Nessus can check this flaw with the plugin 10379 (LCDproc server detection). |
Source Nessus ID | 10379 |
Source Literature | Hacking Exposed: Network Security Secrets & Solutions, Stuart McClure, Joel Scambray and George Kurtz, February 25, 2003, 4th Edition, McGraw-Hill Osborne Media, ISBN 0072227427 |
Source Misc. | http://www.computec.ch |