Signature Detail
Short Name |
SMB:EXPLOIT:SMB-SHRE-NAME-OFLOW |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
SMB |
Release Date |
2004/05/12 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMB: Share Name Overflow
This protocol anomaly is an SMB share name that is longer than 300 characters. On Microsoft Windows XP and 2000, the explorer process terminates when it receives a long SMB share name from a malicious server.
Extended Description
A malicious entity running an SMB server on a network, can create SMB shares with very long names that cause explorer.exe to crash, or allow arbitrary code to be executed.
References