REXEC: Username Buffer Overflow

This protocol anomaly triggers when it detects an REXEC connection with a specified remote user name that is too long. This can indicate a buffer overflow attempt.

Extended Description

An anomaly exists when an rexec command has a username that is too long. Receiving such a request may indicate an attack attempt. The impact of the flaw depends on how an rexecd daemon handles such malformed requests.

References

URL: http://linux.about.com/library/cmd/blcmdl1_rexec.htm http://www.faqs.org/faqs/internet/tcp-ip/applications-FAQ/

Short Name

REXEC:OVERFLOW:USERNAME

Severity

Major

Recommended

False

Recommended Action

None

REXEC: Username Buffer Overflow

Extended Description

References

Found a potential security threat?