[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] [RaQ3]Open ports
- Subject: RE: [cobalt-security] [RaQ3]Open ports
- From: "Mr. M" <mistrM@xxxxxxxxxxxx>
- Date: Sat, 3 Mar 2001 12:59:56 -0800
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
> I scan my RaQ3 for open ports and I find these:
>
> 444 - Simple Network Paging Protocol
> 617 - SCO Desktop Administration Sever
> 7937 - ???
> 7938 - ???
>
> Is this any security hole ?
> How I can close the unnecesary open ports ?
Yes. If your system has been breached then the ONLY way to fix it is to
reinstall the entire OS. When you've been "rooted" its GAME OVER! There is
no way to know how much damage has been done.
Read these:
http://www.sans.org/newlook/resources/IDFAQ/oddports.htm
http://www.isi.edu/in-notes/iana/assignments/port-numbers
M