port 79 "finger"

[abovebrd]

Does port 79 "finger" server as a security threat.

I have it running on one of my servers and wonder if its really needed and if is a security risk ?



-Danny

 

[pmkincaid]

There are a couple very old versions of finger that I believe have possible exploits with them. But the biggest problem with finger is the ability of hackers to do some recon of your network via finger.

For the most part finger is some what out dated and really not needed in today's networks. If it is something you would like to keep since people in your company rely on it for information about other, maybe think about just setting it up internally.

Hope this helps a bit,
Paul

 

[abovebrd]

Most of my users can barely navigate windows 98.

I am going to disbale port 79 "finger" i found I could telnet to it and enter a user name. It then gave me the users shell and a few other usefull hacker bits.

Thanks


-Danny

 

[zoby]

Yes it's the best to do. Indeed finger give possibilty to hackers to know the strucuture of your network.

Zoby

 

[new2unix]

Hi,

I just set up a Linux box at home and would like to find out how do I determine if this "finger" port is also available on the box. Also, how do I disable it?

Thanks

Mike

 

[abovebrd]

Thats pretty easy

Finger is port 79.

a port scan will reveal all of your open ports.
There a utility called nmap that can be used for this.

Most internet sevices are located in /etc/xinetd.d
or /etc/inetd.conf

It depends on what version of Linux you have.

Other services are started at boot (/etc/rc.d/init.d)

Finger should be located in /etc/xinetd.d

For a newbie I would run a utility from the command line called "setup"

Go to system services, this will allow you to easily turn on and off services (such as finger)

dcd@pop.mainstreet.net




-Danny

 

[new2unix]

Thanks Danny, I will give it a try.

Mike

 

[Guest_imported]

NOTICE!
I've found the biggest threat to port 79 is that if a hacker telnets to it and runs a Denial of Services Attack on it the hacker will be given root access!