Signature Detail
Short Name |
MS-RPC:ERR:EPM-INV-TOWER-LEN |
|---|---|
Severity |
High |
Recommended |
No |
Category |
MS-RPC |
Release Date |
2004/02/24 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
MS-RPC: EPM Invalid Tower Length
This protocol anomaly is an Endpoint Mapper (EPM) message with a tower length that is larger than 8192 bytes, or larger than the rest of the fragment length. Detecting this anomaly can indicate a malicious user might be attacking your system.
Extended Description
This is a protocol anomaly.
References