[cobalt-security] scans on port 69

["marcus miller" <cobalt_security_list@xxxxxxxxxxx>]

Hi all,

I have searched the archives and not found anything of any real use and this 
being a potential vulnerability it needs to be of the minute info and not 
referenced to some old problem.

We have seen a massive upsurge in portscans on port 69 on our raq4r, we are 
getting around 200 scans a day.

Correct me if I am wrong in any of the following:
* Port 69 is for tftp - ftp with no authentication that if configured 
incorrectly can allow for transmission password files etc from one box to 
another.

This is probably nothing or unrelated hence I will post this in both the 
cobalt users and security lists.

so what are your thoughts people?


_________________________________________________________________
STOP MORE SPAM with the new MSN 8 and get 3 months FREE*. 
http://join.msn.com/?page=features/junkmail&xAPID=42&PS=47575&PI=7324&DI=7474&SU= 
http://www.hotmail.msn.com/cgi-bin/getmsg&HL=1216hotmailtaglines_stopmorespam_3mf