1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
|
#
# This script was written by Renaud Deraison <deraison@cvs.nessus.org>
#
# See the Nessus Scripts License for details
#
if(description)
{
script_id(10275);
script_cve_id("CVE-1999-0103");
name["english"] = "Systat";
name["francais"] = "Systat";
script_name(english:name["english"], francais:name["francais"]);
desc["english"] = "The 'systat' service provides useful informations
to crackers, such as which processes are running, who is running them,
and so on... It is highly recommanded that you get rid of this
service.
Risk factor : Low
Solution : comment out the 'systat' line in /etc/inetd.conf";
desc["francais"] = "Le service 'systat' donne des informations utiles
aux crackers, comme, par exemple, quels sont les processus qui tournent,
qui les a lanc, etc... Il est recommand que vous vous dbarassiez de
ce service.
Facteur de risque : Faible
Solution : dsactivez ce service en mettant un diese (#) au debut de
la ligne 'systat' dans /etc/inetd.conf";
script_description(english:desc["english"], francais:desc["francais"]);
summary["english"] = "Checks for systat";
summary["francais"] = "Vrifie la prsence du service systat";
script_summary(english:summary["english"], francais:summary["francais"]);
script_category(ACT_GATHER_INFO);
script_copyright(english:"This script is Copyright (C) 1999 Renaud Deraison",
francais:"Ce script est Copyright (C) 1999 Renaud Deraison");
family["english"] = "Useless services";
family["francais"] = "Services inutiles";
script_family(english:family["english"], francais:family["francais"]);
script_dependencie("find_service.nes");
script_require_ports("Services/systat", 11);
exit(0);
}
#
# The script code starts here
#
port = get_kb_item("Services/systat");
if(!port)port = 11;
if(get_port_state(port))
{
soc = open_sock_tcp(port);
if(soc)
{
data = recv_line(socket:soc, length:1024);
if("PID" >< data )security_warning(port);
close(soc);
}
}
|
