Signature Detail
Short Name |
SCAN:MISC:TELNET:ID |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
SCAN |
Keywords |
TELNET |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SCAN: Telnet Command "id"
This signature detects the TELNET command "id." An attacker can verify their privilege level on a compromised machine by submitting the "id" command. Knowing the privilege level allows them to determine what action they can perform with the compromised machine; for example, create a denial-of-service condition or execute arbitrary code. Receiving several hits for this signature should alert the user that their system might be compromised.
Extended Description
None