RPC rusers Remote Information Disclosure

Medium Nessus Plugin ID 11058


It is possible to enumerate logged in users.


The rusersd RPC service is running. It provides an attacker interesting information such as how often the system is being used, the names of the users, and more.


Disable this service if not needed.

Plugin Details

Severity: Medium

ID: 11058

File Name: rusers_output.nasl

Version: 1.19

Type: remote

Family: RPC

Published: 2002/08/03

Updated: 2018/08/13

Dependencies: 10223

Risk Information

Risk Factor: Medium

CVSS v2.0

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

Required KB Items: rpc/portmap

Vulnerability Publication Date: 1990/01/01

Reference Information

CVE: CVE-1999-0626