Signature Detail
Short Name |
SMTP:REQERR:REQ-DUPLICATE-HELLO |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
SMTP |
Release Date |
2003/08/27 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMTP: Duplicate "HELO"
This protocol anomaly triggers when it detects two HELO commands on the same SMTP connection. SMTP clients and servers issue HELO only once. This can indicate an attacker or an exploit script manually trying to send commands to an SMTP server.
Extended Description
This protocol anomaly could enable a remote attacker to deny service to an SMTP server user.
References