[Kerio 2.x] Ports open in all versions of Kerio 2.15!

Forums » The Site » Old Forums » Kerio - Tiny Support » [Kerio 2.x] Ports open in all versions of Kerio 2.15!


Uniqs: 216	Share Topic:	RSS topic:	toggle: flat / full normal / watch	Posting:

Links: ·Forum Guidelines ·Kerio/Tiny pre-3.x FAQ ·BBR Security Forum ·Security FAQ

[Kerio 4.x] port 44334 is OPEN: BIG SECURITY HOLE »
« [Tiny] Integrity Check

ghost16825
Use security metrics
Premium
join:2003-08-26

[Kerio 2.x] Ports open in all versions of Kerio 2.15!

This is an offshoot from this thread:
»[Kerio 4.x] port 44334 is OPEN: BIG SECURITY HOLE

said by the viper :
I did a full port scann 1- 65535 lol while i ate Turkey , and this was the result w/ KPF 4.008 ids on and rule set from Blitzen from 2.1.5...

Port: Status Service Description
1-1970 stealthed n/a n/a
1972-2175 stealthed n/a n/a
2177-44333 stealthed n/a n/a
44335-65535 stealthed n/a n/a
1971 closed n/a n/a
2176 closed n/a n/a
44334 open n/a n/a

Recommendation:

These ports are open/closed on 2.15 as well!

1)Can anyone else confirm this, using the latest one available for download?

2)Can anyone with nmap check these specific ports if you have 2.15 and send in the results. What operating system does the nmap come up with?

permalink · 2003-11-28 02:51:37 · Print ·

gwion
wild colonial boy
Premium,ExMod 2001-08
join:2000-12-28
Pittsburgh, PA

Re: [Kerio 2.x] Ports open in all versions of Kerio 2.15!

see: »[Kerio 4.x] port 44334 is OPEN: BIG SECURITY HOLE

- I SYN scanned 2.1.5 in the following configs... this is with my own ruleset:

Remote allowed/block all inbounds rule active: Blocked by inbounds rule. Returns stealthed.

Remote allowed/no block all inbounds rule:alerts, and, on deny, returns stealthed.

Remote not allowed/block all inbounds rule active: same as above.

Remote not allowed/no block all inbounds rule: same as above.

Evidently, they've lost something, in 4.x... uhhh... a sound implementation of the administrative interface.

--
The willow bends unbroken when angry tempests blow,The stately oak is levelled and all its strength laid low...Oliver Wendell Holmes
Even when you feel like your life is fading
I know that you'll go on forever
You're that good...

permalink · 2003-11-28 03:49:46 · Print ·

BlitzenZeus Burnt Out Cynic Premium,MVM join:2000-01-13 Beaverton, OR	Re: [Kerio 2.x] Ports open in all versions of Keri I'm also completely stealth with Kerio 2x. If you use the gateway option you need to use a block all rule.
	permalink · 2003-11-28 13:50:44 ·

ghost16825 Use security metrics Premium join:2003-08-26	Yes, you're both completely correct. 2.15 does stealth all ports. I was a bit hasty to reach a conclusion running the firewall in a half protected state.
	permalink · 2003-11-29 21:49:37 ·

your comment..

Forums » The Site » Old Forums » Kerio - Tiny Support	[Kerio 4.x] port 44334 is OPEN: BIG SECURITY HOLE » « [Tiny] Integrity Check


Saturday, 28-Nov 08:56:09	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 10 years online! © 1999-2009 dslreports.com. page compression OFF