Portd running |
---|
Risk Level: | High | Check or Attack Name: PortdCheck |
---|---|---|
Platforms: | Any | |
Description: | A port daemon or a potential backdoor program has been detected on port 31337 of the target machine. This usually means that an attacker has backdoored the system. |
|
Remedy: | If the process is unauthoized, consider the computer and possibly your network compromised. Follow your company's policy for recovering from a system compromise. |
|
References: | CERT Tech Tips, Steps for Recovering from a UNIX Root Compromise, http://www.cert.org/tech_tips/root_compromise.html |
Know Your Risks |