Click to See Complete Forum and Search --> : Saint vulnerability issues.


bluehz
07-16-2002, 11:33 AM
* Fresh install of Slackware 8.1
* gShield firewall - basically default setting
* qmail mail server
* cable connection behind Linksys router

Doing a vulnerability scan with Saint I get the following report:

Evidence of Penetration

* linux.macvoodoo.lan: Possible Trinity portshell detected
* linux.macvoodoo.lan: Possible mstream handler detected
* linux.macvoodoo.lan: Possible shaft handler detected
* linux.macvoodoo.lan: Possible stacheldraht handler detected

BROWNPossible Vulnerabilities

* linux.macvoodoo.lan: Is your Kerberos secure? (CVE 2000-0389 2000-0390 2000-0391)
* linux.macvoodoo.lan: possible vulnerability in Linux lpd

BROWNLimit Internet Access ?

* linux.macvoodoo.lan: rlogin is enabled
* linux.macvoodoo.lan: pop receives password in clear
* linux.macvoodoo.lan: rexec is enabled and could help attacker

Should I be worried are these erroneous readings?