14 MLdonkey telnet service detection Peer-to-Peer 2003/11/13 Marc Ruef marc dot ruef at computec dot ch http://www.computec.ch computec.ch Marc Ruef marc dot ruef at computec dot ch http://www.computec.ch computec.ch 2004/11/02 1.4 Corrected the plugin structure and added the accuracy values in 1.4. tcp 4000 open|sleep|close|pattern_exists Welcome on mldonkey command-line 90 This plugin was written with the ATK Attack Editor. MLdonkey Other peer-to-peer solutions Configuration MLdonkey is a peer-to-peer software to sharing files. An open port tcp/4000 and the returning banner may indicate the existence of the telnet service. MLdonkey may be illegal in the environment. Disable MLdonky if not allowed nor needed. If MLdonkey should run then filter incoming traffic on port tcp/4000 to prevent unwanted access to the telnet service. 15 minutes Yes Yes Yes Medium 7 6 6 6 Medium Nessus is able to do the same check. 11124 Hacking Exposed: Network Security Secrets & Solutions, Stuart McClure, Joel Scambray and George Kurtz, February 25, 2003, 4th Edition, McGraw-Hill Osborne Media, ISBN 0072227427 http://www.computec.ch