Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/testing/btest/scripts/base/protocols/ftp
History
Arne Welzel 1b3e8a611e ftp/main: Skip get_pending_command() for intermediate reply lines 
Intermediate lines of multiline replies usually do not contain valid status
codes (even if servers may opt to include them). Their content may be anything
and likely unrelated to the original command. There's little reason for us
trying to match them with a corresponding command.

OSS-Fuzz generated a large command reply with very many intermediate lines
which caused long processing times due to matching every line with all
currently pending commands.
This is a DoS vector against Zeek. The new ipv6-multiline-reply.trace and
ipv6-retr-samba.trace files have been extracted from the external ipv6.trace.
2023-03-23 13:50:36 +01:00
..
bad-adat-encoding.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
cwd-navigation.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
ftp-get-file-size.zeek General btest cleanup 2020-08-11 11:26:22 -07:00
ftp-invalid-reply-code.zeek testing/ftp: Add tests and pcaps with invalid reply lines 2023-01-26 19:56:20 +01:00
ftp-ipv4.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
ftp-ipv6.zeek Remove @load base/frameworks/dpd from tests 2022-08-31 17:00:55 +02:00
ftp-max-arg-length.zeek ftp: Limit user, password, arg and reply_msg column sizes in log 2023-02-21 12:28:07 -07:00
ftp-max-command-length.zeek ftp: Introduce FTP::max_command_length 2022-11-21 09:36:29 +01:00
ftp-max-pending-commands.zeek ftp: Limit pending commands to FTP::max_pending_commands (default 20) 2022-11-08 16:44:17 -07:00
ftp-max-user-length.zeek ftp: Limit user, password, arg and reply_msg column sizes in log 2023-02-21 12:28:07 -07:00
ftp-missing-reply-code.zeek testing/ftp: Add tests and pcaps with invalid reply lines 2023-01-26 19:56:20 +01:00
ftp-missing-space-after-reply-code.zeek testing/ftp: Add tests and pcaps with invalid reply lines 2023-01-26 19:56:20 +01:00
ftp-multiline-reply.zeek ftp/main: Skip get_pending_command() for intermediate reply lines 2023-03-23 13:50:36 +01:00
ftp-samba-retr.zeek ftp/main: Skip get_pending_command() for intermediate reply lines 2023-03-23 13:50:36 +01:00
gridftp.test Implement X509 certificate log caching 2021-06-29 09:41:40 +01:00