Signature Detail

WHOIS: Invalid EOL character

This protocol anomaly is an invalid end-of-line (EOL) character in a WHOIS request. This could indicate a misbehaving client or someone tunneling traffic through an open WHOIS port.

Extended Description

Applications that attempt to process these malformed packets could fail and/or cause an exception. The impact would depend on the implementation of WHOIS, and could cause a buffer overflow, disclosure of confidential information, denial of service (DoS), or execution of arbitrary code.

References

• URL: ftp://ftp.rfc-editor.org/in-notes/rfc3912.txt