# # This script was written by Renaud Deraison # # # See the Nessus Scripts License for details # if(description) { script_id(10219); script_version ("$Revision$"); script_cve_id("CVE-1999-0832", "CAN-2002-0830"); script_bugtraq_id(782); name["english"] = "nfsd service"; name["francais"] = "Service nfsd"; script_name(english:name["english"], francais:name["francais"]); desc["english"] = " The nfsd RPC service is running. In the past, this service has had bugs which allow an intruder to execute arbitrary commands on your system. In addition, FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier have a bug wherein sending a zero length packet to the RPC service will cause the operating system to hang. Solution : Make sure that you have the latest version of nfsd Risk factor : High"; desc["francais"] = " Le service RPC nfsd tourne. Il y a un bug dans certaines versions de ce service qui permettent à un pirate d'executer des commandes arbitraires sur votre système. Vérifiez que vous faites tourner la toute dernière version de nfsd. Facteur de risque : Elevé"; script_description(english:desc["english"], francais:desc["francais"]); summary["english"] = "checks the presence of a RPC service"; summary["francais"] = "vérifie la présence d'un service RPC"; script_summary(english:summary["english"], francais:summary["francais"]); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 1999 Renaud Deraison", francais:"Ce script est Copyright (C) 1999 Renaud Deraison"); family["english"] = "RPC"; family["francais"] = "RPC"; script_family(english:family["english"], francais:family["francais"]); script_dependencie("rpc_portmap.nasl"); script_require_keys("rpc/portmap"); exit(0); } # # The script code starts here # include("misc_func.inc"); RPC_PROG = 100003; tcp = 0; port = get_rpc_port(program:RPC_PROG, protocol:IPPROTO_UDP); if(!port){ port = get_rpc_port(program:RPC_PROG, protocol:IPPROTO_TCP); tcp = 1; } if(port) { if(tcp)security_warning(port); else security_warning(port, protocol:"udp"); }