Kibuv Worm Detection

critical Nessus Plugin ID 18367

Synopsis

The remote host may be compromised.

Description

The welcome message on this port matches the banner of a known backdoor. This is highly suspicious. The host is probably infected by a backdoor and is probably under the control of malicious attackers.

Solution

Patch the affected system and run an antivirus.

See Also

http://www.nessus.org/u?19420d0e

Plugin Details

Severity: Critical

ID: 18367

File Name: ftp_kibuv_worm.nasl

Version: Revision: 1.19

Type: remote

Family: Backdoors

Published: 5/25/2005

Updated: 1/25/2013

Supported Sensors: Nessus

Risk Information

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C