RTSP: Invalid Dynamic Port Number

This protocol anomaly triggers when it detects an RTSP transport request to open a new connection on a port number smaller than 1024. This is not supported by the specifications of RTSP and can indicate an attacker trying to create a back-door to a low-port service.

Extended Description

Such conditions could indicate a configuration or implementation error, or it could indicate that an attack to open a backdoor to a lower port is underway.

References

URL: http://www.faqs.org/rfcs/rfc2326.html

Short Name

RTSP:EXPLOIT:INVALID-PORT

Severity

Warning

Recommended

False

Recommended Action

None

RTSP: Invalid Dynamic Port Number

Extended Description

References

Found a potential security threat?