SMTP: Email Domain Name
This protocol anomaly triggers when it detects a domain name within an e-mail address (for example, localhost.localdomain in root@localhost.localdomain) that is too long. This can indicate a buffer overflow attempt.
Extended Description
SMTP messages containing e-mail domain names longer than 64 characters could indicate that an attack attempt is underway. They could also be the result of software misconfiguration, or poor implementation.
References
Short Name
SMTP:OVERFLOW:EMAIL-DOMAIN
Severity
Major
Recommended
False
Recommended Action
None
Category
SMTP
Release Date
08/27/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Unknown