Preface: IDENT invalid responseLogo -Internet Security Systems

IDENT invalid response

advICE :Intrusions : 2001901
 FAQ
Oh my gosh, I'm being HACKED!!!
How do I report the hacker to my ISP?
I'm seeing lots of attacks, is this normal?

Summary

A hostile server is attempting to exploit the identd client.

Details

Lots of programs will do IDENT reverse lookups when contacted by someone. Many of these programs are vulnerable to attack when the server returns an invalid response.

This event was triggered because it saw somebody return invalid information back to your system, possibly as part of an attack.

 more information
advICE: IDENT service  
More about what the IDENT service does.  
CVE-1999-0204   Sendmail 8.6.9 allows remote attackers to execute root commands, using ident.
 
CIAC: F-13   Unix Sendmail Vulnerabilities
 
X-Force: 627   ident-bo
 

 parametric information
reasonThe explanation why the response field is invalid.
lengthThe length of the identd response field.
identThe identd response field.

 
Version appeared:  

Privacy Policy |  Copyright Info