Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
SMTP:OVERFLOW:COMMAND-LINE |
|---|---|
Severity |
Major |
Recommended |
Yes |
Category |
SMTP |
Keywords |
SMTP Command Line Too Long |
Release Date |
2003/08/27 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
SMTP: Command Line Too Long
This protocol anomaly triggers when it detects a text line (in the command section, before the DATA command) in an SMTP connection that is too long. This can indicate a buffer overflow attempt.
Extended Description
A protocol anomaly exists in malformed SMTP commands having command lines that are too long. Receiving such a message may indicate an attack attempt. The impact of the flaw depends on how an SMTP server handles such a malformed message.
References
- BugTraq: 25357
- BugTraq: 49431
- CVE: CVE-1999-0098
- CVE: CVE-2015-0235
- CVE: CVE-2004-1558
- CVE: CVE-2007-4440
- CVE: CVE-2005-0022
- CVE: CVE-2005-2223
- URL: http://www.faqs.org/rfcs/rfc2821.html