MRTG Web Application Detection

info Nessus Network Monitor Plugin ID 2565

Synopsis

The remote host is running Multi Router Traffic Grapher (MRTG).

Description

The remote host is running Multi Router Traffic Grapher (MRTG). MRTG is a web-based tool that collects data from routers and switches and then displays the information in a graph format. An attacker perusing this page would be able to gain information regarding routers, interfaces, traffic patterns, and more. This information could then be used to launch more sophisticated, targeted attacks.

Solution

Ensure that the page is protected by a password and/or ACLs.

See Also

http://people.ee.ethz.ch/~oetiker/webtools/mrtg/mrtg.html

Plugin Details

Severity: Info

ID: 2565

Family: Web Servers

Published: 1/28/2005

Updated: 6/1/2015