Synopsis
A response from a known finger daemon was observed.
Description
A response from a known finger daemon was observed which indicated that the attacker was able to retrieve a list of three or more valid user names.
Solution
Disable the finger service, or restrict access to this service.