Threat Level: green Handler on Duty: Russ McRee

SANS ISC: Increase in Port 6101 Activity - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Increase in Port 6101 Activity
Port 6101 Activity



It appears that we are again seeing an increase in activity being reported on port 6101.



http://www.dshield.org/port_report.php?port=6101&recax=1&tarax=2&srcax=2&percent=N&days=40



This port is commonly used by Veritas Backup Exec. If you recall back in late December and early January a bulletin was issued by CIAC indicating that there was a potential buffer overflow vulnerability that exists in the Veritas Backup Exec service processes.


http://ciac.llnl.gov/ciac/bulletins/p-066.shtml


Veritas acknowledged that this was an issue and released some hotfixes back in late January.



http://seer.support.veritas.com/docs/273850.htm



If you have not yet applied the appropriate hotfixes - now might be a good time to do it. After all - I would rather you spend your time at home with your family this Easter weekend, not at the shop cleaning up the mess.



Deb Hale


Handler On Duty
Deborah

278 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!