Signature Detail
Short Name |
SNMP:DOS:WIN-DEL |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
SNMP |
Keywords |
WINS-Deletion |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SNMP: WINS-Deletion
This signature detects attempts to delete entries from a WINS server database using SNMP (1.3.6.1.4.1.311.1.2.5.3). The WINS server database maps Windows machine names to IP addresses. Attackers can delete database entries to prevent Windows clients from finding other clients and servers.
Extended Description
None
References