Intrusion PreventionRa1NX.PHP.Bot.PubCall.Auth.Bypass.Remote.Code.Execution
Description
This indicates a possible attack from a backdoor planted in Ra1NX bot which could allow any command to be executed within the privileges of the user.
Affected Products
Ra1NX bot
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Remove Ra1NX shell from the system.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 35059 |
| Created | Apr 23, 2013 |
| Updated | Mar 21, 2023 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Other |