bugTiger UNIX security tool - Bugs: bug #20086, check_services doesn't handle...

 
 

bug #20086: check_services doesn't handle service name aliases correctly when alias is part of original name

Submitter:  None
Submitted:  Tue 05 Jun 2007 02:53:24 PM UTC
   
 
Category:  Security check modules Severity:  5-Critical
Item Group:  Script error Status:  None
Privacy:  Public Assigned to:  None
Open/Closed:  Open Operating System:  All
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 05 Jun 2007 02:53:24 PM UTC, original submission:  

From a tiger run on my box (vanilla Debian Etch):

--WARN-- [inet003w] The port for service postgres is also assigned to service
         postgresql.
--WARN-- [inet003w] The port for service postgres is also assigned to service
         postgresql.
--WARN-- [inet003w] The port for service sane is also assigned to service
         sane-port.

I only have only one line for each of the offending services (for postgres, each one line for tcp and udp). Obviously check_services chokes on the fact that the string 'postgresql' contains the string 'postgres', and 'sane-port' contains 'sane'.
Interestingly enough, the second alias for 'sane-port', 'saned', doesn't trigger this error.

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

No changes have been made to this item

Back to the top

Powered by Savane 3.13-3230.
Corresponding source code