Signature Detail
Short Name |
WORM:CHOD.B |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
WORM |
Keywords |
worm chod |
Release Date |
2005/04/19 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
WORM: MSN Chod.B
This signature detects the propagation of the CHOD.B worm binary over an MSN connections or similar protocols. For maximum protection, you should bind this signature to all high ports (1050-7000).
Extended Description
The Chod.B worm could allow a remote attacker to steal sensitive data from a victim machine, run malicious commands, and perhaps take full control of the machine. This worm could also cause denial of service conditions on the machine and on the network.
References