Signature Detail
Short Name |
SMB:NETBIOS:UNK-SHDR-FLAGS |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
SMB |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMB: Unknown Session Header Flags
This protocol anomaly is an invalid session header flag in the NETBIOS header that encapsulates an SMB. Header flags have only one bit (length extension) that is supported by all versions of SMB.
Extended Description
If the flags section of a NetBIOS packet contains any value other than zero, for any flag other than the length extension bit, this may indicate a transmission error has occurred, or that a malicious party may be injecting malformed packets into the network
References