RPC rusers Remote Information Disclosure

medium Nessus Plugin ID 11058

Language:

Synopsis

It is possible to enumerate logged in users.

Description

The rusersd RPC service is running. It provides an attacker interesting information such as how often the system is being used, the names of the users, and more.

Solution

Disable this service if not needed.

Plugin Details

Severity: Medium

ID: 11058

File Name: rusers_output.nasl

Version: 1.19

Type: remote

Family: RPC

Published: 8/3/2002

Updated: 8/13/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.4

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

Required KB Items: rpc/portmap

Vulnerability Publication Date: 1/1/1990

Reference Information

CVE: CVE-1999-0626

Detections

Analytics