Signature Detail
Short Name |
SYSLOG:FORMAT:PRI-TOO-LONG |
|---|---|
Severity |
High |
Recommended |
No |
Category |
SYSLOG |
Release Date |
2003/08/27 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SYSLOG: Priority Too Long
This protocol anomaly triggers when it detects SYSLOG packets with a priority field that is too long. RFC-3164 recommends that the priority be between 1 to 3 characters long.
Extended Description
A syslog message that has a long priority value constitutes a protocol anomaly. Receiving such a message could indicate that an attacker is attempting to cause a buffer overflow. The impact depends on how a syslog server handles such a malformed message.
References