DistCC Detection

This script is Copyright (C) 2005-2013 Tenable Network Security, Inc.


Synopsis :

A distributed compiler is listening on the remote port.

Description :

The remote host is running distcc, a distributed GCC compiler. distcc
allows a user to use the resources several hosts to compile his
programs more quickly.

As distcc allows anyone to execute arbitrary commands on the remote
host, it should be configured to only accept connections from a
restricted set of IP addresses, otherwise an attacker can use it to
obtain an interactive shell on the remote host with the privileges of
the distcc daemon (usually 'distccd').

See also :

http://distcc.samba.org/security.html

Solution :

Filter incoming traffic to this port, or use the '-a' option switch to
restrict the set of IP addresses distcc will accept.

Risk factor :

High / CVSS Base Score : 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

Family: Service detection

Nessus Plugin ID: 12638 (distcc_detection.nasl)

Bugtraq ID:

CVE ID:

Ready to Scan Unlimited IPs & Run Compliance Checks?

Upgrade to Nessus Professional today!

Buy Now

Combine the Power of Nessus with the Ease of Cloud

Start your free Nessus Cloud trial now!

Begin Free Trial