Thinking...
[get complete service list]
Top of page
Port Information
Protocol Service Name
tcp --- ---
Top IPs Scanning
Today Yesterday
128.1.33.94 (15)35.195.43.11 (44)
152.32.234.97 (11)89.248.163.214 (17)
89.248.163.214 (11)89.248.165.83 (7)
45.43.63.38 (10)89.248.163.217 (7)
152.32.171.73 (7)204.76.203.28 (6)
204.76.203.28 (7)100.27.42.183 (4)
152.32.235.107 (7)99.255.242.127 (4)
123.58.192.229 (6)34.140.63.209 (4)
152.32.142.75 (6)23.95.186.174 (3)
152.32.238.83 (6)162.142.125.131 (2)
Port diary mentions
URL
* DNS Cache Poisoning Report; Increase in Port Activity
* DNS Cache Poisoning Report; Increase in Port Activity; SANS Conference
Top of page
User Comments
Submitted By Date
Comment
Quark 2005-08-18 21:24:38
The Hat Squad Exploit has been fixed in NetVault 7.1.2
Hat-Squad Security Group 2005-04-04 18:05:38
Hat-Squad Security Team has discovered multiple heap and stack buffer overflow vulnerabilities in Bakbone NetVault product. Technical Details: http://www.class101.org/netv-remhbof.pdf (remote heap overflow) http://www.class101.org/netv-locsbof.pdf (local stack overflow) Proof of Concept codes : http://class101.org/36/55/op.php http://www.hat-squad.com Solution: At the moment writing this advisory, NO PATCH IS RELEASED, we can only suggest to : Restrict all incoming connections to 20031/tcp and 20031/udp, a fix might come very soon. Hat-Squad Security Team,
The FrSIRT 2005-04-02 19:26:45
BakBone NetVault Multiple Remote Heap Overflow Vulnerabilities http://www.frsirt.com/english/advisories/2005/0309
2004-11-17 23:23:35
This appears to be BakBone's NetVault primary communications port.
Top of page
CVE Links
CVE # Description
Top of page