Penetration Testing: Remote connection to Webmin Service (Port 10000)

[Wu Fei Liang <cms01017 () cms ac>]

Hello everyone!

I'm currently doing an security audit on a company as a "newbie". After 
scanning the host I leared that several ports were open - including the 
Webmin Port. I tried to connect via Browser to this port but the operation 
timed out. I believe that it is due to the fact that the Webmin Service is 
only available to the localhost. But I am wondering why I was able to connect 
with telnet and download the login-page of Webmin. A simple wget would do the 
same thing.

Can anybody give me some advice and explain why this is that way?

Thx a lot in advance

Kind regards
-- 

--------------------------------------------------------------
WU Fei Liang                         Computer & Media Security
                                University of Applied Sciences
                                       4232 Hagenberg, Austria

[ Intership ]         weigl interservice - http://www.weigl.de
[ Mail work ]                                    f.wu () weigl de
[ Mail priv ]                              wu_fei_liang () cms ac

[ Public-Key ]
http://pgp.mit.edu:11371/pks/lookup?search=0xC5633638&op=index
--------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------