OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: port 511. help needed.
From: Enric (exterWANADOO.ES)
Date: Thu Oct 26 2000 - 14:09:11 CDT

On Wed, 25 Oct 2000, Suzanne Hillman wrote:
> On Wed, 25 Oct 2000, Waldchen, Erick (VIPTechSprt) wrote:

> I was just about to request something like this, since my machine appears
> to have 6010, 6000, and 1024 in the LISTEN states. Apparently 6000 and
> 6010 are X Windows (would that be because I tend to allow myself to use my
> X server from other machines?).

6000 & 6010 is the X window system port, 1024 or 1025 is the port
where KDE listens to, list it with:

fuser -vn tcp 1024

in case you do not see something like this:

   USER PID ACCESS COMMAND
1025/tcp root 412 f.... kdm
                     root 423 f.... XF86_SVGA
                     root 424 f.... kdm
                     root 437 f.... xconsole.real
                     xuser 453 f.... kwm
                     xuser 488 f.... kikbd
                     xuser 494 f.... kaudioserver
                     xuser 495 f.... kwmsound
                     xuser 496 f.... kfm
                     xuser 497 f.... krootwm
                     xuser 498 f.... kpanel
                     xuser 499 f.... kbgndwm
                     xuser 503 f.... maudio
                     xuser 508 f.... gkrellm
                     xuser 509 f.... klipper
                     xuser 3551 f.... sh
                     xuser 3552 f.... kmail

then you *may* be compromised.

 __/ F \/ T F |] \__
     \ L /\ | L |\ /