Bugtraq mailing list archives

Re: SMB redirect program for NT

From: deraadt () CVS OPENBSD ORG (Theo de Raadt)
Date: Tue, 10 Feb 1998 21:05:11 -0700

This program uses the NT port binding vulnerability to redirect a
machine's SMB services to another machine.


Perhaps it is time to remind people that most Unix systems still have
problems in this same area.  On many systems, users can create
"more-specific" or "less-specific" bindings for non-reserved ports,
and thus steal traffic.

It's amusing that a major service this problem happens is with NFS,
the Unix SMB as it were.

Current thread:

CFP - Recent Advances in Intrusion Detection (RAID'98), (continued)
- - - CFP - Recent Advances in Intrusion Detection (RAID'98) Marc Dacier (Feb 10)
    - IBM-ERS Security Vulnerability Alert: IBM AIX: Insecure temporary ibm-ers () ERS IBM COM (Feb 10)
    - Re: Another ld-linux.so problem Roman Drahtmueller (Feb 08)
    - ld confusion Aleph One (Feb 10)
    - Re: ld confusion Cristian Gafton (Feb 11)
    - Sun Security Bulletin #00162 Howie (Feb 10)
    - SMB redirect program for NT Weld Pond (Feb 10)
    - Re: SMB redirect program for NT David LeBlanc (Feb 10)
    - WIngate: the sequel Alans other account (Feb 10)
    - [Workaround]The third SunOS4.1.4 tmpfs bug YAMAMORI Takenori (Feb 10)
    - Re: SMB redirect program for NT Theo de Raadt (Feb 10)
    - IBM-ERS Security Vulnerability Alert: IBM AIX: Telnet denial of ibm-ers () ERS IBM COM (Feb 11)