ClarkConnect Linux clarkconnectd Information Disclosure

medium Nessus Network Monitor Plugin ID 1909

Synopsis

The remote host is vulnerable to a flaw which allows attackers to retrieve sensitive files or data.

Description

The daemon 'clarkconnectd' seems to be running on this port. This daemon can provide sensitive information to attackers, such as the list of running processes, the content of /var/log/messages, the snort log file and more. An attacker may use it to gain more knowledge about this host.

Solution

No solution is known at this time.

Plugin Details

Severity: Medium

ID: 1909

Family: Backdoors

Published: 8/20/2004

Updated: 3/6/2019

Nessus ID: 11277

Risk Information

VPR

Risk Factor: Low

Score: 2.7

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 4.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 5.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: cpe:/h:point_clark_networks:clarkconnect

Reference Information

CVE: CVE-2003-1379

BID: 6934

Detections

Analytics