Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:INVALID:UNEXPECTCHAR |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
unexpected character shellcode |
Release Date |
2005/11/07 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.4+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Unexpected Character in URL
This anomaly triggers if it detects unexpected characters (Space or Tab characters) in a URL after the first found space. Detection of these extra characters can indicate the URL contains a malicious shell code that can cause damage to your system.
Extended Description
None
References
- BugTraq: 2306
- BugTraq: 20250
- CVE: CVE-2006-5112
- CVE: CVE-2009-4819
- CVE: CVE-2014-3978
- CVE: CVE-2014-9305
- URL: http://jsunpack.jeek.org/?report=847afb154a4e876d61f93404842d9a1b93a774fb
- URL: http://www.microsoft.com/technet/security/advisory/912840.mspx
- URL: http://wvware.sourceforge.net/caolan/ora-wmf.html
- URL: http://blogs.technet.com/b/srd/archive/2013/10/08/ms13-080-addresses-two-vulnerabilities-under-limited-targeted-attacks.aspx
- URL: ftp://ftp.rfc-editor.org/in-notes/rfc1738.txt