## RSTAT Vulnerability

### Risk Factor: 1

### Machines Affected:

UNIX machines running the RSTAT service

### Description:

Rstat can give out information on specific machines such as CPU usage, when the machine was last booted, # of disks, # of packets reached, load average, etc.

### Consequences:

A potential intruder can gain information such as if the machine is rarely used, if it is a diskless workstation, etc.

### Fix:

Disable rstat by commenting it out in the /etc/inetd.conf file and restarting inetd.

Links for advisories/more info Rstat man pages