Skip to main content
aagrafi
New Member
December 9, 2016
Question

Is something special with TCP port 5858?

  • December 9, 2016
  • 0 replies
  • 2877 views

Hello,

The issue I describe below happened in a FAD actually, but I'm using this forum since I don't see any activity in the FAD forum.

 

I received a vulnerability report saying that TCP port 5858 in our FAD (VM, version 4.6) is open to administrative access. I verified with Wireshark that when I telnet the FAD at port 5858, the FAD responds with a SYN, ACK. Next, I set telnet to be at port 5858 and then removed telnet from allow access, and still the FAD responds with SYN, ACK when I telnet at 5858.

 

This behavior look very strange to me and I would like to know if there is something special for TCP port 5858. For example, when I set telnet at port 5860, the FAD immediately sends an RST. Do you know why it ACKs when the session opens at 5858?

 

Thanks

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.