[Full-Disclosure] Odd Behavior - Windows Messenger Service

From: morning_wood (se_cur_ity_at_hotmail.com)
Date: 07/16/03

  • Next message: Benjamin Meade: "RE: [Full-Disclosure] Odd Behavior - Windows Messenger Service" 
    To: <bugtraq@securityfocus.com>, <vulnwatch@vulnwatch.org>, <full-disclosure@lists.netsys.com>, "0day" <0day@nothackers.org>
Date: Wed, 16 Jul 2003 02:36:40 -0700

    Donnie Werner
    morning_wood@exploitlabs.com
    July 16, 2003

    Windows® networking ( TCP) and messenger service are both initialized
    before any user/admin login
    has taken place, and are remotely accessable

    odd... setting up default XP box in DMZ I complete the install setting up
    networking ( dhcp ) and ( workgroup )
    only one passworded administrator account as prompted by the instalation
    media.... reboot.
     I leave box unatended for aprox 30 minuts at the login screen...
    Upon sucessfull passworded login, a message-ala-windows messenger service
    is displayed.. ( damn spammers )

    BEFORE THE DESKTOP !!! and before anything ( except wallpaper ) has
    initialized

    here is output from a remote nbtenum session before a sucessfull login of a
    freshly booted XP box

    Network Adapter Adapter: \Device\NetbiosSmb
    MAC Address: 000000000000
    Adapter: \Device\NetBT_Tcpip_{D36A0C7D-1EC4-417E-9A7C-DF4F13AF9D4C}
    MAC Address: 00A0CC397071
    Logged On Users Username: 333\BITCHBOX$
    Logon Server:
    Share Information IPC$
    ADMIN$
    C$

    dunno if this particular behavior has been observed before ( im donning
    Nomex® for the flames )

    Donnie Werner
    http://exlpoitlabs.com

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Benjamin Meade: "RE: [Full-Disclosure] Odd Behavior - Windows Messenger Service"

    Relevant Pages

    • Strange Startup Slow Networking Behavior
      ... I am recently experiencing a strange problem during startup on my system. ... Login begins and Windows ... Applications such as Word 2003, Word Pad, ... occurred in safe mode with networking as well. ...
      (microsoft.public.windowsxp.help_and_support)
    • NFS hangs on graphical login
      ... and networking came up with no ... Local accounts can log in graphically using Gnome, KDE, or Icewm (added ... graphically from the GDM login menu, ... actually suggestions for NFS freezing under other circumstances. ...
      (comp.os.linux.networking)
    • Re: Win2000 desktop is not allowing me to login in domain as well as local computer
      ... values when I am unable to login and have access to regedit. ... installed parallel win2000 (whose networking and domain thing works ... machine hang before the login prompt? ... external USB case is a low cost but highly effective backup ...
      (microsoft.public.win2000.networking)
    • Re: Sharing the same profile among two login configs
      ... I thought it would generally improve networking speed in the corporate ... > also found attempts at such a config unsatisfactory, and, that ... > Associate Expert - Windows XP ExpertZone ... >> to the local machine using my full name for login. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: after bootup and login, takes ages to see the folders in My Computer
      ... I also notice that the folder contents show up at the time when the ... I see this as some problem with the networking starting up after I login ... I have run bootvis and it also shows that it ...
      (microsoft.public.windowsxp.general)