RSH: Buffer Overflow Username

This protocol anomaly triggers when it detects an RSH connection with a specified user name (local or remote) that is too long. This can indicate a buffer overflow attempt.

Extended Description

The detection of an excessively long username in an rsh login event could indicate a software misconfiguration or that an attacker has attempted to cause a buffer overflow on the server.

References

URL: http://www.juniper.net/security/auto/vulnerabilities/vuln2555.html

Short Name

RSH:OVERFLOW:USERNAME

Severity

Major

Recommended

False

Recommended Action

None

RSH: Buffer Overflow Username

Extended Description

References

Found a potential security threat?