Port Protocol Service Description
65 tcp/udp tacacs-ds TACACS-Database Service SANS Internet Storm Center activity for port 65
66 tcp sql-net Oracle SQL-NET - Used for Oracle DB access. - Security Concerns: Auth scheme can be either Oracle or Unix username & password combo - but both passed cleartext by default. Oracles security options: - Can encrypt the re-usable password - Can upgrade to one-time-passwords - Can enable VPN for remote access Block this port at networks perimeter; use only VPN-encrypted data transfers across perimeter. SANS Internet Storm Center activity for port 66
66 tcp/udp sql*net sql*net-oracle sql*net SANS Internet Storm Center activity for port 66
67 tcp/udp bootps Bootstrap Protocol Server - Listening port on bootp & DHCP servers. Clients broadcast to it for boot or network parameters. - Security Concern: Can probe NIS domain name - plus a valued DOS target. SANS Internet Storm Center activity for port 67
67 udp bootps bootps-bootp/dhcp server - bootstrap protocol server SANS Internet Storm Center activity for port 67
68 tcp/udp bootpc Bootstrap Protocol Client - Listening port on bootp & DHCP clients. Servers respond to it with boot or network parameters. SANS Internet Storm Center activity for port 68
68 udp bootpc bootpc-bootp/dhcp client - bootstrap protocol client SANS Internet Storm Center activity for port 68
69 tcp/udp tftp Trivial File Transfer - Non-auth ftp service - used primarily by diskless clients to pull boot files. - Security Concerns: Remote attackers can download server files without auth. Can extend to sensitive files (eg: passwd file) if server is poorly configured. Since file transfer is cleartext - all boot info passed to clients is vulnerable. For routers - this can include passwords. Disable on host unless TFTP server. SANS Internet Storm Center activity for port 69
69 udp tftp tftp-trivial file transfer - trivial file transfer protocol SANS Internet Storm Center activity for port 69
70 tcp/udp gopher - Older search engine server. Used little today - but still installed with MSs IIS. - Disable on host unless TFTP server. SANS Internet Storm Center activity for port 70
71 tcp/udp netrjs-1 Remote Job Service SANS Internet Storm Center activity for port 71
72 tcp/udp netrjs-2 Remote Job Service SANS Internet Storm Center activity for port 72
73 tcp/udp netrjs-3 Remote Job Service SANS Internet Storm Center activity for port 73
74 tcp/udp netrjs-4 Remote Job Service SANS Internet Storm Center activity for port 74
75 tcp/udp priv-dial priv-dial-any private dial out service SANS Internet Storm Center activity for port 75

<< < 1 2 3 4 5 6 7 8 9 10 > >>

Total Records 3780



Statistics
Unique Visits: 30932
Unique Visits Today: 45
 Page Views: 239241
Page Views Today: 120


Copyright © 2007 - InfoSEC
Terms & Conditions :: Privacy Policy :: Astalavista - The Hacking & Security Community :: IT Solutions Knowledge Base