RSH: User "echo"
This signature detects attempts to RSH with the user name "echo." Attackers can gain root access.
Extended Description
The echo user and all other default accounts should be prevented from accessing rsh in order to reduce the chances of unauthorized login by IP spoofing.
References
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3