Signature Detail
Short Name |
TROJAN:MISC:PITFALL-TELNET-ID |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
TROJAN |
Keywords |
pitfall backdoor trojan |
Release Date |
2004/01/08 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TROJAN: Pitfall Telnet Server Identification
This signature detects the banner displayed by the Pitfall telnet server. This server is often used on nonstandard ports as a backdoor. Detecting the banner indicates that the server is infected with the Pitfall Trojan. Using the Pitfall client, attackers can gain unauthorized access to the host computer and execute malicious operations.
Extended Description
Pitfall allows remote attackers unauthorized access and control of infected machines.
References