Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: Open Port on Win98 box

Re: Open Port on Win98 box

From: <tschweikle_at_FIDUCIA.DE>
Date: Wed, 10 Nov 1999 19:45:10 +0100

>>
>> We found an open port number 13991 on all Win98 boxes installed. The
>> port is listening on addess 0.0.0.0 (means to all).
>>
>> What software does this port reserve? And what is it listening for?
>>
>
> Use a program called Inzider to find out which process is litening (just
> like the Unix lsof, but worse ;)
>
> Get it here; http://ntsecurity.nu/toolbox/

This was helpful. I found out this port (and others) where used
by NetFinity. While NetFinity allows taking the whole desktop
of other computers (like Back Orifice does --- but never was
meant to be a "hacker" tool). It might be a back door. There
is only password protection for all services NetFinity provides.
The connection isn't encrypted.

NetFinity is IBM's tool for remote administration.

OT: GkWare Setup program doesn't run on Win98. I've informed the
    author about the problem. Workaround: install on NT4, copy
    the install directory. The programm seems to run.

--
Thomas
Received on Nov 13 1999
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos