CVE ID:	CVE-2000-0138
Description:	A system has a distributed denial of service (DDOS) attack master, agent, or zombie installed, such as (1) Trinoo, (2) Tribe Flood Network (TFN), (3) Tribe Flood Network 2000 (TFN2K), (4) stacheldraht, (5) mstream, or (6) shaft.
Test IDs:	1.3.6.1.4.1.25623.1.0.10270   1.3.6.1.4.1.25623.1.0.10350   1.3.6.1.4.1.25623.1.0.10307   1.3.6.1.4.1.25623.1.0.10390   1.3.6.1.4.1.25623.1.0.10283   1.3.6.1.4.1.25623.1.0.10501   1.3.6.1.4.1.25623.1.0.10391   1.3.6.1.4.1.25623.1.0.10288
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2000-0138 Bugtraq: 19991206 Analysis of Tribe Flood Network (Google Search) Bugtraq: 19991206 Analysis of trin00 (Google Search) Bugtraq: 19991229 Analysis of "stacheldraht" (Google Search) Bugtraq: 20000211 A DDOS proposal. (Google Search) Bugtraq: 20000211 DDOS Attack Mitigation (Google Search) Bugtraq: 20000211 TFN2K - An Analysis (Google Search) Bugtraq: 20000429 Source code to mstream, a DDoS tool (Google Search) http://marc.info/?l=bugtraq&m=95715370208598&w=2 Bugtraq: 20000501 Re: Source code to mstream, a DDoS tool (Google Search) http://marc.info/?l=bugtraq&m=95722093124322&w=2 Cert/CC Advisory: CA-2000-01 Cert/CC Advisory: IN-99-04 ISS Security Advisory: 20000209 Denial of Service Attack using the TFN2K and Stacheldraht programs ISS Security Advisory: 20000502 "mstream" Distributed Denial of Service Tool http://xforce.iss.net/alerts/advise48.php3 Sun Security Bulletin: 00193