DistCC Detection

This script is Copyright (C) 2005-2013 Tenable Network Security, Inc.


Synopsis :

A distributed compiler is listening on the remote port.

Description :

The remote host is running distcc, a distributed GCC compiler. distcc
allows a user to use the resources several hosts to compile his
programs more quickly.

As distcc allows anyone to execute arbitrary commands on the remote
host, it should be configured to only accept connections from a
restricted set of IP addresses, otherwise an attacker can use it to
obtain an interactive shell on the remote host with the privileges of
the distcc daemon (usually 'distccd').

See also :

http://distcc.samba.org/security.html

Solution :

Filter incoming traffic to this port, or use the '-a' option switch to
restrict the set of IP addresses distcc will accept.

Risk factor :

High / CVSS Base Score : 7.5
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P)

Family: Service detection

Nessus Plugin ID: 12638 (distcc_detection.nasl)

Bugtraq ID:

CVE ID: