TROJAN: Blood Fest Evolution Server Banner
This signature detects the Blood Fest Evolution backdoor server initial response to a client connection request. Detecting this response indicates that your system is infected with the Blood Fest Evolution Trojan. Using the Blood Fest Evolution client, attackers can gain command-line access to the target host.
Extended Description
A remote attacker can gain unauthorized access to a system infected with this Trojan.
Short Name
TROJAN:MISC:BF-EVOLUTION-BANNER
Severity
Critical
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
Banner Blood CVE-1999-0660 Evolution Fest Server
Release Date
01/09/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
Port
TCP/1095,1097,1098,1099
False Positive
Unknown
CVSS Score
8.8