Re: [cobalt-security] Re: [cobalt-users] ssh on port 44658???

[Gareth Bromley]

Loryan Strant wrote:
> I've found that "/usr/sbin/nscd" is the responsible program for that port
> being open. I don't know what that program is, as it is not found on our
> backup RaQ4 server (which mind you has a lot less updates and programs
> installed).
nscd = Name Service Cache Daemon

>From the man pages:
Nscd provides cacheing for  the  passwd(5),  group(5)  and
hosts(5)  databases through standard libc interfaces, such
as  getpwnam(3),  getpwuid(3),  getgrnam(3),  getgrgid(3),
gethostbyname(3) and others. 

I not sure it has a default port, so 4465 may be sensible. Trying
stopping the service, renaming the exec etc., and monitor?

Enjoy,

--Gareth
_______________________________________________
cobalt-security mailing list
[EMAIL PROTECTED]
http://list.cobalt.com/mailman/listinfo/cobalt-security