[Dshield] User Account Locked.

Deb Hale haled at pionet.net
Tue Mar 25 21:02:20 GMT 2003

Hash: SHA1


Looks like a known exploit.  Check out the posts on this web site.

- -----Original Message-----
From: list-bounces at dshield.org [mailto:list-bounces at dshield.org] On Behalf Of Pablo Vittori
Sent: Tuesday, March 25, 2003 12:33 PM
To: list at dshield.org
Subject: [Dshield] User Account Locked.
Importance: High

We are an IT Consulting Firm in Argentina, since 2 or 3 weeks ago we are experiencing an increment of the attempts to attack the networks in our customers. Today 2 of them, one with 15 users and other with more than 120 user, are having the same issue, all the account of the domain of Windows NT 4 have been locked. When our technician correct the account and unlock, 10 or 15 minutes later the problem is again. After several resets and test the problem disapear but we don't know how to correct this or the origin of the problem. 
In this two cases we are also using Microsoft Exchange Server 5.5. Anyone hear something about a backdoor or bug over this configuration and this effects. We update daily with all the service packs and patches.
Pablo Vittori
Desarrollos del Sur - Argentina
list mailing list
list at dshield.org
To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list

Version: PGP 8.0


More information about the list mailing list