RE: (PM) Winnuke?!

portmasters@one.net
Fri, 9 Jan 1998 12:14:29 -0500 (EST)

Next generation of Winnuke:

There is a new thing that was just announced on Bugtraq called "bonk". It
seems to be something to watch out for. It'll crash *patched* and
unpatched 95 and NT machines... Sysadmins of networks running on these
platforms beware. :) (Yet something else for a workaround.) :-/

Have fun with it. :)

Christopher Beck
Network Engineer
OneNet Communications, Inc.
513.554.1638 - cpbeck@one.net

----snip!----

Does anyone have an URL that describes winnuke and how to prevent attacks
against it? I've been searching around, but I haven't really found the
goods on it. I heard that winnuke works on ports 137-139 and I'm seeing
UDP packets being sent from by dialup clients to our broadcast address on
ports 137 and 137, which is making me paranoid :-) I also know that
Netbeui uses these ports, so the packets could be harmless.

-Jason

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.