Signature Detail
Short Name |
NETBIOS:DOS:RFPARALYZE |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
NETBIOS |
Keywords |
RFParalyze NULL Session DOS Attack |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
NETBIOS: RFParalyze NULL Session DOS Attack
This signature detects attempts to exploit a known vulnerability against Microsoft Windows 95/98. Attackers can send NULL source host names within a NETBIOS session to disrupt network connectivity or cause the system to lock-up, crash, or reboot.
Extended Description
Unpredictable results, including system crashes, lock-ups, reboots, and loss of network connectivity, can occur in Windows 95/98 if a NetBIOS session packet is received with the source host name set to NULL.
Affected Products
- Microsoft Windows 95
- Microsoft Windows 98
References
- BugTraq: 1163
- CVE: CVE-2000-0347
- URL: http://www.securityfocus.com/archive/1/58061