Signature Detail

SCAN: Cybercop Finger Redirection

This signature detects attempts to scan the system using CyberCop Scanner. Attackers can be attempting to locate a version of the FINGER service that allows FINGER redirection, which allows a remote host to bounce a FINGER request through the target-host FINGER daemon.

Extended Description

CyberCop Scanner supports Finger redirection to locate a version of a Finger service. This signature detects such an attempt.

References

• CVE: CVE-1999-0106
• URL: http://www.juniper.net/security/auto/vulnerabilities/vuln2319.html
• URL: http://www.windowsitpro.com/Article/ArticleID/9203/9203.html?Ad=1
• URL: http://en.wikipedia.org/wiki/Finger_protocol