CVE-1999-0526 Vulnerbility on W2k8 R2

[Alan Coopersmith]

On 09/17/14 08:45 PM, Duane Fish wrote:
> XII is what I was told.

I've never heard of "XII".  X11 is version 11 of the X protocol, not an
actual software program.

As noted on https://en.wikipedia.org/wiki/X_Window_System#Implementations
X servers for Microsoft Windows include Cygwin/X, Xming, Exceed, MKS X/Server,
Reflection X, and X-Win32.

Unless you can figure out the actual software being run, there's not much
we can do to help you.  It would be like being told you need to fix
your http program and not knowing if that's Internet Explorer, Firefox,
Chrome, Opera, Safari, or something else.

And if you can't find any signs of any of those programs, then it's most likely
a false alarm from your auditor or vulnerability scanner, when they can't figure
out what software is listening on port 6000, and just make up answers to look
useful when they're not.

-- 
	-Alan Coopersmith-              alan.coopersmith at oracle.com
	 Oracle Solaris Engineering - http://blogs.oracle.com/alanc