|
Port 2003 Details
known port assignments and vulnerabilities
threat/application/port search:
| Port(s) |
Protocol |
Service |
Details |
Source |
| 2003 |
tcp |
trojan |
TransScout trojan
Lineage, MultiTheftAuto (TCP/UDP) also use this port.
Backdoor.Win32.NinjaSpy.c / Remote Command Execution - the malware listens on TCP ports 2003, 2004 and drops a DLL named "cmd.dll" under Windows dir. Connecting to port 2003, you will get back a number "9951" from the infected host. If we send the value 1000 we get a message in Portugese "Pisca Pisca Ativado" translates to "Blink Blink Activated". If we connect to port 2004 and send "abc123" we get message "Acesso negado..." translates to "Access denied". However, if you take the initial number we received earlier (9951) when connecting to port 2003 and apply some calculation we expose hidden functionality. Take the 9951 value and invert the first two digits to 66 and then add together the last two 5 + 1 to equal 6 for a final value of "666". Example, initial number (9951) 99 inverted equals 66 and 5 + 1 = 6. Enter and send the constructed value of "666" to port 2003 and TCP port 999 is opened. Connect to port 999 and you get back a remote shell.
References: [MVID-2021-0202] |
SG
|
| 2003 |
udp |
applications |
2003 UDP used by roughtime.cloudflare.com
D-Link DAP-1160 could allow a remote attacker to bypass security restrictions, caused by the failure to restrict access to the dccd daemon. By sending a specially-crafted D-Link Click 'n Connect (DCC) protocol request to UDP port 2003, a remote attacker could exploit this vulnerability obtain sensitive information, modify configuration settings or cause the device to reboot.
References: [XFDB-59884], [BID-41187], [BID-41222], [SECUNIA-40399]
IANA registered for: Brutus Server (TCP/UDP) |
SG
|
| 2003 |
tcp |
cfingerd |
GNU finger |
SANS
|
| 2003 |
tcp |
TransScout |
[trojan] TransScout |
SANS
|
| 2000,2003 |
tcp |
applications |
Lineage |
Portforward
|
| 2003 |
tcp,udp |
applications |
MultiTheftAuto |
Portforward
|
| 2003 |
tcp |
finger |
GNU finger (cfingerd) |
Nmap
|
| 2003 |
tcp,udp |
brutus |
Brutus Server, registered 2008-02-28 |
IANA
|
|
8 records found
Related ports: 2000 2002 2004 2005 2002
|