TNS: Malformed IP Address

This anomaly triggers if it detects malformed IP addresses in a Transparent Network Substrate (TNS) message. This can indicate that an attacker is attempting to compromise your system.

Extended Description

A TNS message containing an invalid IP address constitutes a protocol anomaly. Such a condition could indicate a TNS configuration or implementation error. It also could indicate that an attack against the TNS service is underway. The impact depends on the implementation of TNS, and could result in a denial of service, buffer overflow, and information disclosure.

References

URL: http://www.orafaq.com/faqnet.htm http://en.wikipedia.org/wiki/Transparent_Network_Substrate

Short Name

DB:ORACLE:TNS:MALFORMED-IP

Severity

Minor

Recommended

False

Recommended Action

None

TNS: Malformed IP Address

Extended Description

References

Found a potential security threat?