Signature Detail
Short Name |
RADIUS:MALFORMED_VENDOR_ATTR |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
RADIUS |
Release Date |
2004/01/29 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
RADIUS: Malformed Vendor-Specific Attribute
This protocol anomaly is a RADIUS vendor length that is less than 2, or the sum of all vendor lengths is not equal to length of the Vendor-Specific attribute minus 6. According to the RADIUS RFC, if a Vendor specific string is longer than or equal to 2 bytes, it should be encoded as a sequence of vendor type / vendor length / value fields, where vendor type and length both are eight bit long. The vendor lengths should not be less than 2. The sum of all vendor lengths should be equal to length of the Vendor-Specific attribute minus 6 (6 is the sum of the lengths of other fields including type, length, and vendor id).
Extended Description
None
References