IDENT: JIdentd Buffer Overflow

This signature detects attempts to exploit a known vulnerability against JIdentD 1.0, a Linux identd daemon. If JIdentD is running as root, attackers can gain root access.

Extended Description

A successful attack would allow a remote attacker to gain unauthorized access to the system and possibly inject and execute arbitrary code using the privileges of the jidentd process. Attacks that fail to allow execution of injected code may terminate jidentd to cause a denial of service.

References

URL: http://lwn.net/1998/0917/jidentd.html

Short Name

IDENT:JIDENTD:IDENT-OF1

Severity

Major

Recommended

False

Recommended Action

Drop

IDENT: JIdentd Buffer Overflow

Extended Description

References

Found a potential security threat?