GHOST UDP Network Client Detection

info Nessus Network Monitor Plugin ID 1178

Synopsis

The remote host is a GHOST client which looks for a GHOST server and, if found, downloads a bootable image at system startup.

Description

The remote host is a GHOST client which looks for a GHOST server and, if found, downloads a bootable image at system startup.

Solution

Ensure that this protocol is secured and within corporate and security policies and guidelines. This traffic should never be seen on an external (DMZ or Extranet) segment.

Plugin Details

Severity: Info

ID: 1178

Published: 8/20/2004

Updated: 6/1/2015