TROJAN: Pitfall Suprise Attack Initial Server Response

This signature detects the initial server response from a Pitfall backdoor Trojan. Detecting the initial response could indicate that the server is infected with the Pitfall Trojan. A successful attack can allow an attacker to perform a verity of malicious activities.

Extended Description

Pitfall Surprise is a backdoor Trojan that infects Windows operating systems. It allows remote attackers to take control of the infected host.

References

CVE: CVE-1999-0660

URL: http://www.pestpatrol.com/PestInfo/P/Pitfall.asp http://securityresponse.symantec.com/avcenter/nis_ids/s20215.html

Short Name

TROJAN:MISC:PITFALL-SERV-RESP

Severity

Major

Recommended

False

Recommended Action

Drop

TROJAN: Pitfall Suprise Attack Initial Server Response

Extended Description

References

Found a potential security threat?