Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
SMB:ERROR:MAL-MSG |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Ignore |
Category |
SMB |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
SMB: Malformed Message
This protocol anomaly detects malformed SMB message in which the wcount field is larger than the message size or other inconsistent lengths in the SMB.
Extended Description
A NetBIOS IP packet containing a WCT (word count) field greater than the total datagram size could indicate a network configuration error, or that an attack involving the injection of malformed NetBIOS datagrams is underway.
References