UltraVNC w/ DSM Plugin Detection (2)
Info Nessus Plugin ID 25821
SynopsisA remote control service is running on this port.
DescriptionUltraVNC seems to be running on the remote port.
Upon connection, the remote service on this port sends pseudo-random bytes.
It is probably UltraVNC with the new DSM encryption plugin. This plugin tunnels the RFB protocol into a RC4 or AES encrypted stream.
SolutionIf this service is not needed, disable it or filter incoming traffic to this port.