Signature Detail
Short Name |
DOS:WINDOWS:WINNUKE-NETBIOS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
DOS |
Keywords |
WinNuke (netbios) |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
DOS: WinNuke (netbios)
This signature detects attempts to exploit a known vulnerability in Microsoft Windows and SCO Open Server. SCO Open Server 5.0 and all versions of Windows are susceptible. Attackers can remotely send "Out of Band" data (with the URGENT bit set in the TCP header) to NETBIOS/139, causing the service to terminate.
Extended Description
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
Affected Products
- Microsoft windows_2000
- Microsoft windows_95
- Microsoft windows_nt
- Sco openserver 5.0
References
- BugTraq: 2010
- CVE: CVE-1999-0153
- URL: http://www.securityfocus.com/advisories/1007
- URL: http://www.securityfocus.com/advisories/1411