SMB Unicode file name overflow
advICE :Intrusions : 2000506

Summary

Possible Intrusion attempt.

Details

A file name in Microsoft networking is excessively long - this may indicate an attempt by a hacker to overload a buffer and gain unauthorized access to a system.

parametric information length The length of the file name; if it is longer than a few hundred characters, then it may be a buffer overflow attempt. filename The initial portion of the filename. In a buffer overflow attempt, the initial part of the file name is useful for determining which subsystem is being compromised.

configuration for this item file.maxname 200 The maximum length of a file name.

 
Version appeared: