|
Port 7306 Details
known port assignments and vulnerabilities
threat/application/port search:
| Port(s) |
Protocol |
Service |
Details |
Source |
| 7306 |
tcp |
trojan |
NetMonitor trojan (a.k.a. NetSpy, NTMonitor, BackDoor-E.srv., Backdoor.Netspy, Backdoor.NetMonitor)
Zimbra mysql [mailbox]
Backdoor.Win32.NetSpy.10 / Heap Corruption - the malware listens on TCP port 7306 and drops an executable named "SPYNOTIFY.EXE" under SysWOW64 dir. Third-party attackers who can reach the server can send a specially crafted payload causing a heap corruption overwriting EDX and EAX registers.
References: [MVID-2021-0235]
Backdoor.Win32.NetSpy.10 / Unauthenticated Remote Command Execution - the malware listens on TCP port 7306. Attackers who can reach infected hosts can run commands made available by the backdoor. Sending commands using Ncat and Telnet both fail with errors, probably don't like the linefeed chars, so need to write your own custom client. Example commands avail are put, mkd, exec and msg.
References: [MVID-2022-0551] |
SG
|
| 7306 |
tcp |
|
Zimbra mysql [mailbox] (unofficial) |
Wikipedia
|
| 7306 |
tcp |
trojan |
NetSpy |
Trojans
|
| 7306 |
tcp |
NetMonitor |
[trojan] NetMonitor |
SANS
|
| 7306 |
tcp |
swx |
Swiss Exchange |
SANS
|
| 7300-7359 |
tcp,udp |
swx |
The Swiss Exchange |
IANA
|
|
6 records found
Related ports: 7300 7301 7307 7308
|