Signature Detail
Short Name |
DHCP:ERROR:INV-MAGIC-COOKIE |
|---|---|
Severity |
High |
Recommended |
No |
Category |
DHCP |
Keywords |
Invalid Magic Cookie Error |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
DHCP: Invalid Magic Cookie Error
This protocol anomaly is a DHCP message with an invalid magic cookie. RFC-2131 specifies that all DHCP messages should have a magic cookie of 0x63825363 to distinguish between BOOTP and DHCP messages.
Extended Description
A UDP packet containing a magic cookie with numbers not corresponding to the DHCP specifications constitutes a protocol anomaly. Detection of this anomaly could indicate a software misconfiguration, or that an attacker is attempting to inject malformed packets into the network.
References
- BugTraq: 11920
- CVE: CVE-2004-0899
- URL: http://www.ietf.org/rfc/rfc2131.txt