CDE's subprocess control daemon — and the port classic Blizzard games host on.
IANA registers 6112 as dtspcd, the Common Desktop Environment Subprocess Control Daemon, which accepts client requests to launch commands and applications and historically ran from inetd as root on commercial Unix. CERT VU#172583 (2002) documented a remotely exploitable buffer overflow in dtspcd giving root, and it was scanned heavily for years afterward. The same port number is separately used by Blizzard's older titles — Warcraft II and III, StarCraft, Diablo II — whose clients bind 6112 to host games, which is why home routers carry 6112 forwarding rules. Which one you have depends entirely on the host: a Solaris/AIX/HP-UX box means dtspcd, a Windows desktop means a game.
Do not expose
dtspcd is a root-privileged remote command-execution daemon with a history of pre-auth overflows; disable it in inetd.conf and block the port. Game hosting on 6112 is a deliberate inbound forward, and should be scoped to that one host.
$ sudo lsof -nP -iTCP:6112 -sTCP:LISTENSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.