Successful Shell Attack Detected - Unix 'hping2' Tool (Listen Mode)

high Nessus Network Monitor Plugin ID 6170

Synopsis

A successful shell attack was detected.

Description

A successful 'hping2' command occurred in a TCP session normally used for a standard service.

Solution

The command activity observed is indicative of a possible compromise. Consider performing a full audit of the system to investigate further.

See Also

http://www.hping.org

Plugin Details

Severity: High

ID: 6170

Family: Generic

Published: 1/6/2012

Updated: 7/11/2018

Vulnerability Information

CPE: cpe:/o:unix