search

IITGN-CS431 / project-cns

1 stars 23 forks source link

GROUP 11 - PORT MISCONFIGURATION #163

Closed heerkubadia closed 3 days ago

heerkubadia commented 1 week ago

The application server is intended to run on port 8080; #define SERVER_PORT 8080

however, it is accessible on an unintended port (61186). bank_f 45467 heerkubadia 3u IPv4 0x640896be53aad2c1 0t0 TCP *:61186 (LISTEN)

This misconfiguration poses several security risks, including unintended exposure of sensitive services, potential unauthorized access, and vulnerabilities to port scanning attacks. Additionally, it can lead to confusion among clients regarding which port to connect to.

Chhavigoyal02 commented 1 week ago

Did you modify the port number in the source code? If yes, it should function correctly on any publicly accessible port specified in the code file. If not, please provide more details, as I checked on our system and found that the code is only accessible on the defined port, not on any other.

heerkubadia commented 1 week ago

No I didnt change anything in the source code. As I wasn’t able to connect I checked where the executable was running.

krupaphd24 commented 1 week ago

Did you modify the port number in the source code? If yes, it should function correctly on any publicly accessible port specified in the code file. If not, please provide more details, as I checked on our system and found that the code is only accessible on the defined port, not on any other.

Yes, and in rare case if only 8080 is occupied it can use other ones randomly. Still if you aren't able to connect with server "at all", we can update it for other means.

heerkubadia commented 1 week ago

I did check if 8080 was occupied but it wasn’t.