Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

The rexec service is running

Information

Severity

Severity

Critical

Family

Family

Useless services

CVSSv2 Base

CVSSv2 Base

10.0

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Solution Type

Solution Type

Mitigation

Created

Created

3 years ago

Modified

Modified

3 years ago

Summary

This remote host is running a rexec service.

Insight

Insight

rexec (remote execution client for an exec server) has the same kind of functionality that rsh has: you can execute shell commands on a remote computer. The main difference is that rexec authenticate by reading the username and password *unencrypted* from the socket.

Detection Method

Detection Method

Checks if a vulnerable version is present on the target host.

Solution

Solution

Disable the rexec service and use alternatives like SSH instead.

Common Vulnerabilities and Exposures (CVE)