TROJAN: Xanadu 1.11 Connection
This signature detects the Xanadu server banner on the standard Xanadu TCP port (31557). With Xanadu, attackers can use a clear text protocol to gain backdoor control of infected hosts.
Extended Description
Xanadu is a remote administration tool which enables remote attackers to gain complete control over an infected machine.
Short Name
TROJAN:MISC:XANADU111-CON
Severity
Minor
Recommended
False
Recommended Action
None
Category
TROJAN
Keywords
1.11 CVE-1999-0660 Connection Xanadu
Release Date
01/14/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
Port
TCP/31557
False Positive
Unknown
CVSS Score
8.8