POP3: Buffer Overflow Command

This protocol anomaly triggers when it detects a POP3 command that exceeds four (4) bytes, the standard length for a POP3 command. This can indicate a non-standard POP3 client/server or an attacker has gained command-line access to the server.

Extended Description

Receiving such a message may indicate a buffer overflow attack attempt. The impact of the flaw depends on how a vulnerable POP3 server handles such a malformed message.

References

BugTraq: 22603

URL: http://www.faqs.org/rfcs/rfc1939.html

Short Name

POP3:OVERFLOW:COMMAND

Severity

Major

Recommended

False

Recommended Action

None

POP3: Buffer Overflow Command

Extended Description

References

Found a potential security threat?