Socks 4 Proxy Detection

info Nessus Network Monitor Plugin ID 3883

Synopsis

The remote host is acting as a Socks version 4 proxy.

Description

The remote host is acting as a Socks version 4 proxy. This allows remote proxy clients to tunnel traffic through the host. This sort of behavior is somewhat commonplace on compromised hosts.

Solution

Ensure that the proxy is authorized with respect to corporate policies and guidelines.

Plugin Details

Severity: Info

ID: 3883

Family: Generic

Published: 1/15/2007

Updated: 6/1/2015