RMI Registry Detection

info Nessus Network Monitor Plugin ID 4583

Synopsis

An RMI registry is listening on the remote host.

Description

The remote host is running an RMI registry, which acts as a bootstrap naming service for registering and retrieving remote objects with simple names in the Java Remote Method Invocation (RMI) system. This server is managed and monitored by a Sun Jconsole system.

Solution

Ensure that only valid clients are allowed to connect to the management ports of this server.

See Also

http://java.sun.com/j2se/1.5.0/docs/guide/rmi/spec/rmi-protocol3.html

http://java.sun.com/j2se/1.5.0/docs/guide/rmi/spec/rmiTOC.html

Plugin Details

Severity: Info

ID: 4583

Family: Generic

Published: 8/18/2004

Updated: 6/1/2015

Nessus ID: 22227