Thinking...
[get complete service list]
Port Information
Protocol Service Name
tcp --- ---
Top IPs Scanning
Today Yesterday
96.227.81.153 (7)216.239.32.174 (9)
77.90.185.235 (1)185.243.5.246 (8)
77.90.185.52 (1)5.75.228.172 (6)
195.140.214.22 (1)85.217.140.37 (4)
79.124.58.134 (1)79.124.56.146 (2)
176.65.148.37 (1)185.243.5.22 (2)
37.10.113.210 (1)216.39.242.74 (1)
85.217.140.52 (1)14.169.75.170 (1)
192.155.84.147 (1)167.94.146.38 (1)
195.140.214.21 (1)66.132.195.29 (1)
User Comments
Submitted By Date
Comment
cathy crane 2009-10-04 18:45:22
I just installed Fedora Core 5 and ran nmap about an hour after putting the box on the internet. 39608/tcp state: open service: unknown. netstat -ap shows this to be 1533/rpc.statd. according to http://fedoranews.org/mediawiki/index.php/Which_Services_Can_I_Disable%3F#rpcgssd.2Frpcidmapd.2Frpcsvcgssd these can be turned off if not using NFS. chkconfig --list | grep rpc will show you what these services do at various run levels. chkconfig --level 35 <servicename> off will turn that service off for run levels 3 & 5. That got rid of the 39608 issue for me. I also stopped nfslock & netfs services. I didn't find any "new" exploits for this service, but the activity on the port and the history of exploits on this service makes me paranoid.
CVE Links
CVE # Description