R80.30 - mygateway ipstcl2: Special characters found

[AkosBakos]

Hi All,

Gateway Version:  R80.30 (2.6)  - JHF 226 

I found a lot of enties in customer's messages file. I know there is a characther but, how can I point out which configuration contains it?

Can you help me?

(part of ) /var/log/messages:

Apr 14 05:14:31 2021 mygateway ipstcl2: Special characters found
Apr 14 05:14:31 2021 mygateway ipstcl2: check_special_char: The value of the key catid contained special character
Apr 14 05:14:31 2021 mygateway ipstcl2: Special characters found
Apr 14 05:14:32 2021 mygateway ipstcl2: check_special_char: The value of the key HTNAME contained special character
Apr 14 05:14:32 2021 mygateway ipstcl2: Special characters found
Apr 14 05:14:32 2021 mygateway ipstcl2: check_special_char: The value of the key direct contained special character
Apr 14 05:14:32 2021 mygateway ipstcl2: Special characters found
Apr 14 05:14:32 2021 mygateway ipstcl2: check_special_char: The value of the key v contained special character
Apr 14 05:14:32 2021 mygateway ipstcl2: Special characters found
Apr 14 05:14:32 2021 mygateway ipstcl2: check_special_char: The value of the key v contained special character
Apr 14 05:14:32 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:13 2021 mygateway ipstcl2: check_special_char: The value of the key type_id[] contained special character
Apr 14 05:16:13 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key INIFILE contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key helpFile contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key lookup contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key manufacturers_id contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key helpFile contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key return contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key Itemid contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key appName contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:18 2021 mygateway ipstcl2: check_special_char: The value of the key menu contained special character
Apr 14 05:16:18 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The value of the key pageTitle contained special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The value of the key width contained special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The value of the key text contained special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The value of the key confirm contained special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: non-valid characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The value of the key op contained special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:19 2021 mygateway ipstcl2: check_special_char: The key &name contains special character
Apr 14 05:16:19 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:20 2021 mygateway ipstcl2: check_special_char: The key <script>alert(document.domain)</script> contains special character
Apr 14 05:16:20 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:20 2021 mygateway ipstcl2: check_special_char: The value of the key type contained special character
Apr 14 05:16:20 2021 mygateway ipstcl2: Special characters found
Apr 14 05:16:20 2021 mygateway ipstcl2: check_special_char: The value of the key bn contained special character
Apr 14 05:16:20 2021 mygateway ipstcl2: Special characters found

[_Val_]

What does the oldest message say?

[AkosBakos]

Unfortunately the oldest messages file does not contain the first message.
Thats my problem.
I suppose that, customer configurates SNMP, now my investigation focus on this.
Any other ideas are welcome 🙂

[_Val_]

Please check that SNMP, FTP/TFTP and other customer configuration, do not contain any special character in a username or password. If you cannot find any, please clean the messages and reboot, then tail message file for the occurrence. 

[AkosBakos]

Hi Val,

We did the reboot, and the first occurence is this:

Apr 23 02:34:48 2021 mygw ipstcl2: check_special_char: The value of the key target contained special character
Apr 23 02:34:48 2021 mygw ipstcl2: Special characters found

Can you suggest further steps? Or I need to open a TAC case?

BR,

Ákos

[eltonsimoes]

Hi, 

I also experienced this same problem in version R81.10 jhf take 130 in the Check Point 7000 model. In my case, it was a special character (!) that was added by one of the administrators in the input message (banner). After removing the character, the error no longer appeared in /var/log/messages. Hope this helps!

Best regards,

Elton Simões