X Display Manager Control Protocol (XDMCP) Detection

Medium Nessus Plugin ID 10891


The XDMCP service is running on the remote host.


The X Display Manager Control Protocol (XDMCP) service allows a Unix user to remotely obtain a graphical X11 login and therefore act as a local user on the remote host. If an attacker can gain a valid login and password, this service could be used to gain further access on the remote host. An attacker may also use this service to mount a dictionary attack against the remote host to try to log in remotely.

Note that XDMCP is vulnerable to man-in-the-middle attacks, making it easy for attackers to steal the credentials of legitimate users by impersonating the XDMCP server. In addition to this, XDMCP is not a ciphered protocol, which allows an attacker to capture the keystrokes entered by the user.


Disable the XDMCP service, if you do not use it, and do not allow this service to run across the Internet.

Plugin Details

Severity: Medium

ID: 10891

File Name: xdmcp.nasl

Version: $Revision: 1.20 $

Type: remote

Published: 2002/03/13

Modified: 2016/01/05

Risk Information

Risk Factor: Medium


Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Information

Vulnerability Publication Date: 2002/01/01

Reference Information

OSVDB: 735