## Rusers Vulnerability

### Risk Factor: 4

### Machines Affected:

Most UNIXes running rusers daemon

### Description:

If you are running an rusers daemon remote users can gain info on your systems, logged in users, etc. This is virtually identical to finger in output of information.

EX.

    ~evil> rusers -l victim.com

    userid  hostname:terminal  login date  login time  idletime  login host
    jdoe    tty7               07/30/96    13:02       0         target

### Consequences:

Remote users can gain info on possible trusted hosts, and use usernames to try to brute force an account break-in.

### Fix:

Send a kill -HUP to the indetd process ID after diasabling rusers

Links for advisories/more info

rusers man page