This application requires Javascript for optimal performance.

Finger.Version.Query

Alias(es)

Version.Query

Release Date

Sep 11, 2006

Severity

info

Impact

Information gathering for further attack on fingerd daemon.

Description

It indicates a possible attempt to find finger daemon version for information gathering.

Fingerd daemon provides information such as name, contact info of users who are logged-on to the system to a client request. This log is generated when finger daemon version is probed by a malicious user, it may be used for further attack on the finger daemon.

Affected Products

Any system running finger daemon.

Recommended Actions

The default action has been set to pass. If this signature is not triggered by legitimate traffic in your network environment, change its action to reset session.

Coverage

IPS
VCM

Reference/s

http://www.sans.org/y2k/fingerd.htm

Reference: VID-12455