HTTP: Content Overflow

This protocol anomaly triggers when the indicated length in the HTTP header Content-Length is exceeded by the length of the actual content data.

Extended Description

This signature detects a malformed HTTP message with an entity body having a length larger than what is specified in the Content-Length header. Receiving such a malformed message may indicate an attack attempt. The impact of this flaw depends on how a vulnerable HTTP implementation handles such a malformed message.

References

URL: http://www.faqs.org/rfcs/rfc2068.html

Short Name

HTTP:OVERFLOW:CONTENT-OVERFLOW

Severity

Major

Recommended

True

Recommended Action

None

HTTP: Content Overflow

Extended Description

References

Found a potential security threat?