Signature Detail
Short Name |
SMTP:OVERFLOW:TOO-MANY-RCPT |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
SMTP |
Release Date |
2003/08/27 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMTP: Too Many "RCPT TO"
This protocol anomaly triggers when it detects too many "RCPT TO:" recipients in an SMTP connection. This can indicate a very popular e-mail message or a denial-of-service buffer overflow attempt.
Extended Description
A message with a large number of RCPT TO: commands could indicate spamming abuse, a software error, or that an attacker is attempting to cause a denial of service to the e-mail server. Legitimate users may also send messages with a large number of recipients.
References