Signature Detail
Short Name |
HTTP:OVERFLOW:HOST |
|---|---|
Severity |
Medium |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Release Date |
2004/02/12 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Host Overflow
This protocol anomaly triggers when an HTTP Host header length exceeds the user-defined maximum. The default length is 256; you can change this setting in the Sensor Settings Rulebase>Protocol Thresholds and Configuration>HTTP>Maximum Host length.
Extended Description
IBM Tivoli Storage Manager client is prone to multiple vulnerabilities that can allow attackers to crash the client, execute arbitrary code in the context of the application, or gain unauthorized access to a client's data. These issues affect Tivoli Storage Manager client 5.1, V5.2, V5.3, and V5.4.
Affected Products
- IBM Tivoli Storage Manager 5.1 Client
- IBM Tivoli Storage Manager 5.2.3 .4 Client
- IBM Tivoli Storage Manager 5.2 Client
- IBM Tivoli Storage Manager 5.3 Client
- IBM Tivoli Storage Manager 5.4 Client
References
- BugTraq: 25743
- BugTraq: 6870
- CVE: CVE-2007-4880
- CVE: CVE-2003-0178
- CVE: CVE-2013-4115
- URL: http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.23