WHATPORT(512) whatport.net WHATPORT(512)
512

exec (BSD rexec)

BSD rexec — run a command on a remote host, with the username and password sent in cleartext.

TCP IANA registry

Description

IANA registers TCP 512 as "exec": remote process execution with authentication performed using passwords and UNIX login names. A client opens the connection, sends a NUL-separated username, password, and command line, and the rexecd server runs the command and streams back its output. It is the oldest and weakest of the three BSD r-services (512 exec, 513 rlogin, 514 rsh) and virtually every modern distribution ships rexecd disabled or not at all. On UDP the same number is comsat/biff, the local new-mail notifier, which is a different and equally obsolete service.

Exposed to the internet?

Do not expose

The password crosses the wire in plaintext on every invocation and the whole session is unencrypted — there is no configuration that makes this safe. Replace it with SSH.

Check it yourself

$ nc -vz -w 3 TARGET 512

See also

Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.

Get Beige Box →

also available as JSON · Markdown

Corrections or a missing port? Reply @rimrocksystems.