RE: Open Guest Share question

From: Mark Challender (MarkC@mtbaker.wednet.edu)
Date: 09/27/01 

Message-ID: <9A0A3DC261C5D311900900600806068CCA8801@Castor.mtbaker.wednet.edu>
From: Mark Challender <MarkC@mtbaker.wednet.edu>
To: "'niceshorts@yahoo.com'" <niceshorts@yahoo.com>, "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com>
Subject: RE: Open Guest Share question
Date: Thu, 27 Sep 2001 13:03:45 -0700

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Get the newest version 1.05 from the EEYE web site. It is faster and
doesn't have false positives.

- -----Original Message-----
From: niceshorts@yahoo.com [mailto:niceshorts@yahoo.com]
Sent: Thursday, September 27, 2001 8:38 AM
To: 'focus-ms@securityfocus.com'
Subject: Re: Open Guest Share question

Evan Mann hat geschrieben:

>I ran the free version of eEye's Nimda scanner and it came back with
>"Open Guest Share" on all of my Servers, both WinNT 4.0 SP6a and
>Windows 2000.
>
>Now, all of these machines are patched and none are actually
>infected. So what is this "Opne Guest Share" then? How do I remedy
>it as a security hole?

    I haven't used eEye's scanner, but you might try winfo from
    ntsecurity.nu and check for Null Session access.

    -anthony kim

- --
HTTP request sent, awaiting response... 404 Object Not Found
ERROR 404: Object Not Found.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBO7OGFt5aUxficepaEQJFCgCg0ZTX47Lq9sWuj9+keAuHmTCcEx0AoKK6
90HK94CVzBN2UVin2Zcz7lmf
=DXTC
-----END PGP SIGNATURE-----