Short Name |
HTTP:OVERFLOW:URL-OVERFLOW |
---|---|
Severity |
Major |
Recommended |
No |
Category |
HTTP |
Keywords |
http |
Release Date |
2003/08/27 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This protocol anomaly triggers when an HTTP request with a URL that exceeds the length threshold is detected. This can be an attempt to overflow the server. Default value: 1024. You can set the HTTP request length threshold to a higher or lower value. In IDP Manager: Select a security policy from Security Policies, then select the Sensor Settings tab. Select Protocol Thresholds and Configuration > HTTP. In Netscreen-Security Manager: In the device navigation tree select Security > IDP SM Settings, then select the Protocol Thresholds and Configuration tab. Under HTTP, click the Show button. Set the Maximum Request length to the new value and click OK.
Any value that exceeds the user defined maximum value is regarded as a protocol anomaly. The impact depends on how an HTTP server responds to the anomaly.