FTP: Password Too Long

This protocol anomaly indicates an FTP client password that exceeds the length threshold. This can indicate a malicious FTP client attempting to overflow the server. Default value: 64. You can set the FTP password length threshold to a higher or lower value. In IDP Manager: Select a security policy from Security Policies, then select the Sensor Settings tab. Select Protocol Thresholds and Configuration > FTP. In Netscreen-Security Manager: In the device navigation tree select Security > IDP SM Settings, then select the Protocol Thresholds and Configuration tab. Under FTP, click the Show button. Set the Maximum Password length to the new value and click OK.

Extended Description

Such conditions could indicate a configuration or implementation error, or it could indicate that an attack against FTP servers or clients is underway.

References

BugTraq: 45957

CVE: CVE-2006-6576

URL: http://www.faqs.org/rfcs/rfc959.html

Short Name

FTP:OVERFLOW:PASS-TOO-LONG

Severity

Major

Recommended

True

Recommended Action

Drop

FTP: Password Too Long

Extended Description

References

Found a potential security threat?