Kismet Server Information Disclosure

medium Nessus Network Monitor Plugin ID 4558

Synopsis

It is possible to collect information from the remote wireless monitoring service.

Description

The remote host is running a Kismet server and allows clients to use it to monitor wireless activity. An anonymous attacker may use the information collected to enumerate a network.

Solution

Limit incoming traffic to this port if and, if appropriate, do not allow clients to list WEP keys.

See Also

http://svn.kismetwireless.net/code/trunk/docs/DEVEL.client

Plugin Details

Severity: Medium

ID: 4558

Family: Policy

Published: 8/18/2004

Updated: 1/15/2016

Nessus ID: 33257