Signature Detail
Short Name |
NNTP:INTERNETNEWS-NULL-PATH-DOS |
|---|---|
Severity |
Medium |
Recommended |
No |
Recommended Action |
Drop |
Category |
NNTP |
Keywords |
InterNetNews NULL Path Denial of Service |
Release Date |
2012/11/16 |
Update Number |
2204 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
NNTP: InterNetNews NULL Path Denial of Service
This signature detects attempts to exploit a known flaw in InterNetNews. The vulnerability occurs in the 'innd' daemon, which handles NNTP connections. The 'innd' daemon can be forced to terminate by causing an access violation (raising a SIGSEGV). This vulnerability can be exploited for Denial of Service. It is believed that it cannot be exploited to gain privileges.