whatportis.com
suggest an edit →

Port 6112DTSPCD

DTSPCD (Distributed Terminal Server Process Controller Daemon) is a network service primarily used to remotely execute commands and launch applications on UNIX systems, notably those running CDE (Common Desktop Environment). It facilitates client-server interactions for remote desktop management, enabling administrative tasks and remote application control over a network. While originally designed to enhance remote system management capabilities, it has since fallen out of favor due to significant security vulnerabilities..

inRemote AccessNetwork ServicesSystem
transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
4/10

caution

lookups
10,409

rank 434 of 993 · top 44%

2 other services are registered on port 6112. compare all 3 →

Technical Details

what runs on :6112

DTSPCD is a legacy network daemon used predominantly in UNIX systems supporting the Common Desktop Environment (CDE). This daemon listens on TCP and UDP port 6112 to accept remote requests from X Window System clients. It allows these clients to execute commands and manage applications remotely, providing a form of thin-client capability for centralized desktop environments.

When a remote connection is established, DTSPCD spawns child processes to execute requested commands with user-specified credentials. This facilitates launching graphical applications remotely, essential for managing distributed desktop environments. It was commonly found on Solaris, HP-UX, and AIX systems deployed in enterprise environments during the late 1990s and early 2000s.

Despite its intended purpose, DTSPCD is largely obsolete today. The service is mostly disabled by default in modern UNIX derivatives due to declining use of CDE and the rise of secure alternatives such as SSH and X11 forwarding. However, legacy systems may still have it active, posing latent security concerns if not properly managed.

Security Information

exposure of :6112

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

remote access averages 4.0 across 110 ports — this one sits level with it.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Common Vulnerabilities:

  • DTSPCD has suffered from critical buffer overflow vulnerabilities that can be exploited remotely to execute arbitrary code with elevated privileges.
  • Attackers may leverage weak authentication mechanisms, or flaws in protocol handling, to gain unauthorized access or escalate privileges.
  • The service risks man-in-the-middle attacks due to the lack of built-in encryption, allowing intercepting and altering of remote commands.

Common Mitigations:

  • Disable the DTSPCD service entirely if it is not explicitly required for operational needs.
  • Implement strict access control lists and firewall policies to restrict port 6112 access to trusted hosts only.
  • Patch systems with vendor-provided security updates addressing known DTSPCD vulnerabilities.
  • Replace DTSPCD functionality with more secure alternatives like SSH and modern remote management protocols.
  • Employ network monitoring to detect suspicious activity related to this port.

Related Ports

all 110 in remote access →

the 8 most looked-up other ports in remote access — 110 ports carry that label.

portservicerisk
:8000Intel Remote Desktop / Alternate HTTP Portsafe
:8888D2GS Admin Consolecaution
:8881Atlasz Secure Servercaution
:5938TeamViewercaution
:8291Winbox MikroTik Admincaution
:8008IBM HTTP Server Admincaution
:135Microsoft EPMAPcaution
:23Telnetcaution

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted