Signature Detail
Short Name |
SHELLCODE:LINUX:CHMOD-SHADOW |
|---|---|
Severity |
Critical |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
SHELLCODE |
Keywords |
Linux/x86 Shadow File World Read/Write Enable |
Release Date |
2013/01/16 |
Update Number |
2225 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SHELLCODE: Linux/x86 Shadow File World Read/Write Enable
This signature detects shellcode designed to modify permissions on the etc/shadow file that stores sensitive password hashes on most Linux systems. Attempts to execute such shellcode could be part of an ongoing malicious attack.
References