[unisog] scanners for the lastest MS vulnerabilities?

Jordan Wiens jwiens at nersp.nerdc.ufl.edu
Wed Oct 22 12:55:40 GMT 2003


On Wed, 22 Oct 2003, Russell Fulton wrote:

> Weblock 135 inbound from the Internet so that stops the spam without
> disabling popups.

No it doesn't, it just makes the spams a bit harder to send.  Netbios is
just the RPC service for messenger; messenger itself is still running on
whatever high port it's on, so you might have to guess some, but it's not
too hard.  Read the description of the iss scanning tool to see what I
mean:

http://www.iss.net/support/product_utilities/ms03-043/

And yes, I've gotten popups on machines with 135-139 blocked..

-- 
Jordan Wiens, CISSP
UF Network Incident Response Team
(352)392-2061




More information about the unisog mailing list