SCAN: Telnet Response: Attempt to SU From Wrong Group
This signature detects a TELNET server response to a "su root" request emanating from the wrong group. The "su root" request asks the TELNET daemon to substitute the current user identity for root. Attackers requesting the "su root" receive the error message "to su root."
Short Name
SCAN:MISC:TELNET:SU-WRNG-GRP
Severity
Info
Recommended
False
Recommended Action
None
Category
SCAN
Keywords
Attempt From Group Response: SU Telnet Wrong to
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Rarely