Signature Detail

TROJAN: Poison Ivy C&C Server Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Poison Ivy C&C Server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Poison Ivy is prone to a stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Poison Ivy 2.3.2 is vulnerable; other versions may also be affected.

Affected Products

• Poison Ivy 2.3.2

References

• BugTraq: 54339
• URL: http://www.poisonivy-rat.com/index.php