On 30/08/05, daniel parkes <liquidsmail@gmail.com> wrote:

Hy people,

Im doing a security research in 3 machines that have and oracle server, a was server and a apache 1.3 server, when i do a nmap to the servers the 3 of them have the rpc-bind port active is this necesary for a web server??.

Thnx a lot!!

Its easy to see what services rpc is running buy sending the command:ç # rpcinfo -p HOST program vers proto port 100000 2 tcp 111 portmapper 100000 2 udp 111 portmapper 100003 2 udp 2049 nfs 100003 3 udp 2049 nfs 100003 2 tcp 2049 nfs 100003 3 tcp 2049 nfs 100021 1 udp 32768 nlockmgr 100021 3 udp 32768 nlockmgr 100021 4 udp 32768 nlockmgr 100021 1 tcp 32771 nlockmgr 100021 3 tcp 32771 nlockmgr 100021 4 tcp 32771 nlockmgr 100005 1 udp 32770 mountd 100005 1 tcp 32772 mountd 100005 2 udp 32770 mountd 100005 2 tcp 32772 mountd 100005 3 udp 32770 mountd 100005 3 tcp 32772 mountd