OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: [suse-security] unknown service on port 1024 and open xdm ports
From: Holger-Schmidtarcor.net
Date: Wed Apr 12 2000 - 11:03:38 CDT

Hey all,

On my systems I try to close as many ports as possible without realising a
firewall !! For the portscans I use "nmap".

While examing all open ports I found at least three ports which are
difficult to close:

port service damon

515 printer lpd
1024 unknown ???
6000 X11 xdm

Then I've heard from someone on this list, that there's a possibility to close
X11 while using the parameter "-nolisten tcp". This works fine and now port
6000 is closed.

While I'm looking for the other ports I restarted the XDM process and so port
1024 changed into another one (1032, 1447, 1452) with different service-names
(iad3,apri-lm,gtegsc-lm). Then I stop the XDM process and these funny processes
were gone !!

When start XDM again, there will be another port with another service-name !!

Do you now what happen there ??

I tried it on another machine too and there I've got the following ports:

1024 unknown (after bootup)
1352 video-aktivman
1401 goldleaf-licman

I'm not sure if this a security-problem or not ?!

I hope that somebody can help me.

Bye
Holger

PS: Now after a reboot of the system and a additional /sbin/init.d/xdm restart
the funny ports and processes are gone !!

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com

---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com