Signature Detail

APP: Arkeia Network Backup Agent Access

This signature detects attempts to access an Arkeia Network Backup Agent, which contains recently discovered vulnerabilities. The Agent's default configuration enables unauthorized access to files on a host. Note: This signature detects all connections to the Agent. If you are using this product on your network and this signature detects a connection, it might not indicate malicious activity. We recommend not using this signature when monitoring internal network traffic to avoid false positives.

Extended Description

Successful exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to a server. Attackers can read and write files on a server, or execute malicious code with the privileges of the System or Local Users.

References

• CVE: CVE-2005-0496
• URL: http://www.juniper.net/security/auto/vulnerabilities/vuln2778.html
• URL: http://securitytracker.com/alerts/2005/Feb/1013276.html
• URL: http://securitytracker.com/alerts/2005/Feb/1013256.html