Security Incidents: IIS Using Port 1843

[Matt Barton <matt () webexc com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello

We have a server that has been experiencing some odd behavior.  It is
running Microsoft Windows 2000 Server, Service Pack 2 with IIS 5.  So far
twice inetinfo.exe has stopped for no reason.  In trying to investigate
the issue, I ran fport and noticed that inetinfo.exe was bound to port
1843/tcp, which seems very odd to me.

Searches on Google have not revealed anything useful (other than some
information on how that port is used with some Netopia products).

Does this ring any bells with anyone?

Thanks in advance!

- -- 

Matt Barton
Webexcellence
PH: 317.423.3548 x22
TF: 800.808.6332 x22
FX: 317.423.8735
matt () webexc com
www.webexc.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE9mMgE67cWHlKNnWkRAv5OAKCetVBxhZyurw7x5bl/70alFApUaACePmVU
vs6tkyFVf7kzhtJ31b46rgI=
=vzZ2
-----END PGP SIGNATURE-----



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com