RPC rusers Remote Information Disclosure

Medium Nessus Plugin ID 11058

New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.

VPR Score: 3.4

Synopsis

It is possible to enumerate logged in users.

Description

The rusersd RPC service is running. It provides an attacker interesting information such as how often the system is being used, the names of the users, and more.

Solution

Disable this service if not needed.

Plugin Details

Severity: Medium

ID: 11058

File Name: rusers_output.nasl

Version: 1.19

Type: remote

Family: RPC

Published: 2002/08/03

Updated: 2018/08/13

Dependencies: 10223

Risk Information

Risk Factor: Medium

VPR Score: 3.4

CVSS v2.0

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

Required KB Items: rpc/portmap

Vulnerability Publication Date: 1990/01/01

Reference Information

CVE: CVE-1999-0626