bugTiger UNIX security tool - Bugs: bug #20086, check_services doesn't handle...


bug #20086: check_services doesn't handle service name aliases correctly when alias is part of original name

Submitted by:  None
Submitted on:  Tue 05 Jun 2007 02:53:24 PM UTC  
Category: Security check modulesSeverity: 5-Critical
Item Group: Script errorStatus: None
Privacy: PublicAssigned to: None
Open/Closed: OpenOperating System: All

Add a New Comment (Rich MarkupRich Markup):

You are not logged in

Please log in, so followups can be emailed to you.


Tue 05 Jun 2007 02:53:24 PM UTC, original submission:

From a tiger run on my box (vanilla Debian Etch):

--WARN-- [inet003w] The port for service postgres is also assigned to service
--WARN-- [inet003w] The port for service postgres is also assigned to service
--WARN-- [inet003w] The port for service sane is also assigned to service

I only have only one line for each of the offending services (for postgres, each one line for tcp and udp). Obviously check_services chokes on the fact that the string 'postgresql' contains the string 'postgres', and 'sane-port' contains 'sane'.
Interestingly enough, the second alias for 'sane-port', 'saned', doesn't trigger this error.



(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


CC list is empty


Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.


Please enter the title of George Orwell's famous dystopian book (it's a date):



No Changes Have Been Made to This Item

Back to the top

Powered by Savane 3.1-cleanup