TROJAN: Ghost Server Response
This signature detects the initial server response from a Ghost Trojan server. Detecting this response indicates that your system is infected with the Ghost backdoor Trojan. Using the Ghost client, attackers can gain unauthorized access to the host computer and execute malicious operations.
Extended Description
Ghost allows remote attackers to have unauthorized control and access to an infected system.
Short Name
TROJAN:MISC:GHOST-SRV-RESP
Severity
Major
Recommended
False
Recommended Action
Drop
Category
TROJAN
Keywords
CVE-1999-0660 Ghost Response Server
Release Date
01/14/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
Port
TCP/9696-9697
False Positive
Unknown
CVSS Score
8.8