FINGER: Binary Data

This signature detects binary server-to-client data on FINGER connections. FINGER connections should not have binary data, and the presence of binary data can indicate a malicious .plan, buffer overflow or tunneling attempt.

Extended Description

Presence of non-ASCII characters in finger network traffic may indicate that a buffer overflow or other attack is being attempted and should be detected.

References

URL: http://www.faqs.org/rfcs/rfc1288.html

Short Name

FINGER:REPLYERROR:BIN-DATA

Severity

Warning

Recommended

False

Recommended Action

None

FINGER: Binary Data

Extended Description

References

Found a potential security threat?