Click to See Complete Forum and Search --> : Security Warning - Listening on Device ??


Usulsuspct
11-15-2001, 07:16 AM
Below is the contents of a KWrited window which appears on my desktop every morning when I get up. I am running Mandrake 8.0, I am wondering what does all this mean? I have used Mandarke before and have not gotten this message?

Security Warning: There is modifications for port listening on your machine :
- Opened ports : tcp 0 0 *:33517 *:* LISTEN 27178/kdeinit: kxml
- Opened ports : tcp 0 0 *:6000 *:* LISTEN 27071/X
- Opened ports : tcp 0 0 *:ftp *:* LISTEN 22061/proftpd (acce
- Opened ports : udp 0 0 localhost.localdo:32863 *:* 22150/smbd
- Closed ports : tcp 0 0 *:32969 *:* LISTEN 14858/kdeinit: kxml
- Closed ports : tcp 0 0 *:6000 *:* LISTEN 14782/X
- Closed ports : udp 0 0 localhost.localdo:32780 *:* 2513/smbd

Security Warning: World Writeable files found :
- /tmp
- /tmp/.ICE-unix
- /tmp/.X11-unix
- /tmp/.X11-unix/X0
- /tmp/.font-unix
- /tmp/.font-unix/fs-1
- /usr/share/apps/kscd/cddb/blues
- /usr/share/apps/kscd/cddb/classical
- /usr/share/apps/kscd/cddb/country
- /usr/share/apps/kscd/cddb/data
- /usr/share/apps/kscd/cddb/folk
- /usr/share/apps/kscd/cddb/jazz
- /usr/share/apps/kscd/cddb/misc
- /usr/share/apps/kscd/cddb/newage
- /usr/share/apps/kscd/cddb/reggae
- /usr/share/apps/kscd/cddb/rock
- /usr/share/apps/kscd/cddb/soundtrack
- /var/apache-mm
- /var/spool/samba
- /var/tmp

TCaptain70
11-15-2001, 11:44 AM
Well I don't know what the first half of your messages mean...but on my Mandrake machine I've seen the second part.

There's a security/audit script that runs every week (I think its every week, maybe everynight?) and if you stay logged on as root, you see the output in whatever terminal you left open. If no one is logged, I usually don't see the output unless I got into one of the logfiles (can't remember which right now).

That second part tells you which files anyone can write to.