Signature Detail
Short Name |
TFTP:FNAME-NOT-T2 |
|---|---|
Severity |
Critical |
Recommended |
No |
Recommended Action |
Drop |
Category |
TFTP |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
TFTP: Filename Not NULL Terminated
This protocol anomaly is a TFTP Read or Write request that does not have a NULL terminator in the filename. RFC-1350 specifies that a zero byte should follow the filename specification in a TFTP message.
Extended Description
A protocol anomaly exists when a TFTP RRQ or WRQ request does not have a NULL byte following a file name. Receiving such a packet may indicate an attempt to attack a system. The impact of such a malformed packet depends entirely upon the implementation of TFTP that handles it.
References
- BugTraq: 22923
- CVE: CVE-2007-1435
- URL: http://www.ietf.org/rfc/rfc1350.txt