RSH: User "echo"

This signature detects attempts to RSH with the user name "echo." Attackers can gain root access.

Extended Description

The echo user and all other default accounts should be prevented from accessing rsh in order to reduce the chances of unauthorized login by IP spoofing.

Short Name
RSH:USER:USER-ECHO
Severity
Minor
Recommended
False
Recommended Action
None
Category
RSH
Keywords
"echo" User
Release Date
04/22/2003
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown

Found a potential security threat?