Signature Detail
Short Name |
SHELLCODE:SPARC:WRITE-EXIT |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
SHELLCODE |
Keywords |
Solaris write and exit System Calls |
Release Date |
2013/05/08 |
Update Number |
2261 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SHELLCODE: Solaris write and exit System Calls
This signature detects shellcode designed to execute write and exit system call on Solaris platforms. Although, not suspicious on their own, but when these system calls are found in a particular sequence, it could be an indication of malicious activity within your network.