[Dshield] User Account Locked.

Deb Hale haled at pionet.net
Tue Mar 25 21:02:20 GMT 2003


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://www.tek-tips.com/gviewthread.cfm/lev2/3/lev3/19/pid/55/qid/418282

Looks like a known exploit.  Check out the posts on this web site.

- -----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On Behalf Of Pablo Vittori
Sent: Tuesday, March 25, 2003 12:33 PM
To: list at dshield.org
Subject: [Dshield] User Account Locked.
Importance: High


We are an IT Consulting Firm in Argentina, since 2 or 3 weeks ago we are experiencing an increment of the attempts to attack the networks in our customers. Today 2 of them, one with 15 users and other with more than 120 user, are having the same issue, all the account of the domain of Windows NT 4 have been locked. When our technician correct the account and unlock, 10 or 15 minutes later the problem is again. After several resets and test the problem disapear but we don't know how to correct this or the origin of the problem. 
In this two cases we are also using Microsoft Exchange Server 5.5. Anyone hear something about a backdoor or bug over this configuration and this effects. We update daily with all the service packs and patches.
 
Thanks.
 
Pablo Vittori
Desarrollos del Sur - Argentina
 
_______________________________________________
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list


-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBPoDD2zxOOHZjYde8EQI2JgCePtZNEYOnH3Hqx3wZb4rlzrnn6qgAn0uC
vNCx03wCwFFL7Ajnh1niPORU
=Yvrk
-----END PGP SIGNATURE-----




More information about the list mailing list