ClarkConnect Linux clarkconnectd Information Disclosure

Medium Nessus Network Monitor Plugin ID 1909

Synopsis

The remote host is vulnerable to a flaw which allows attackers to retrieve sensitive files or data.

Description

The daemon 'clarkconnectd' seems to be running on this port. This daemon can provide sensitive information to attackers, such as the list of running processes, the content of /var/log/messages, the snort log file and more. An attacker may use it to gain more knowledge about this host.

Solution

No solution is known at this time.

See Also

http://archives.neohapsis.com/archives/bugtraq/2003-02/att-0318/01-clarkconnect.txt

Plugin Details

Severity: Medium

ID: 1909

Family: Backdoors

Published: 2004/08/20

Modified: 2018/09/16

Nessus ID: 11277

Risk Information

Risk Factor: Medium

CVSSv2

Base Score: 5

Temporal Score: 4.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

CVSSv3

Base Score: 5.3

Temporal Score: 5.1

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Temporal Vector: CVSS3#E:H/RL:O/RC:C

Vulnerability Information

CPE: cpe:/h:point_clark_networks:clarkconnect

Reference Information

CVE: CVE-2003-1379

BID: 6934