Re: (PM) Winnuke?!

NOT a LE employee (livingston@iav.com)
Thu, 8 Jan 1998 14:15:38 -1000 (HST)

On Thu, 8 Jan 1998, Jason Hatch wrote:

>
> Does anyone have an URL that describes winnuke and how to prevent attacks
> against it? I've been searching around, but I haven't really found the
> goods on it. I heard that winnuke works on ports 137-139 and I'm seeing
> UDP packets being sent from by dialup clients to our broadcast address on
> ports 137 and 137, which is making me paranoid :-) I also know that
> Netbeui uses these ports, so the packets could be harmless.

http://www.windows95.com/bugs/security.html

http://nuke.rirc.net/

http://www.rootshell.com

etc etc.... bugtraq list on www.geek-girl.com

ntbugtraq lists a new one attacking high-ports with a funked up packet,
but details weren't forthcoming...

Now I really know I have to sleep! half were off the top of my head and
the rest were from a 'quick' web search... hmmm... someone kick me off
this machine!!!!

--
Aloha from Paradise,

Sherwood

- To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-users' in the body of the message.