SMTP: Email Address

This protocol anomaly triggers when it detects an e-mail address that is too long. This can indicate a buffer overflow attempt.

Extended Description

An SMTP message on TCP port 25 in which an e-mail address length exceeds a certain value constitutes a protocol anomaly. Detection of this condition could either indicate a network configuration error or that an attack, such as a buffer overflow.

References

BugTraq: 8641 10290

CVE: CVE-2004-0399

URL: http://www.faqs.org/rfcs/rfc2821.html

Short Name

SMTP:OVERFLOW:EMAIL-ADDRESS

Severity

Major

Recommended

False

Recommended Action

None

SMTP: Email Address

Extended Description

References

Found a potential security threat?