RE: UPnP on Windows 2000 Pro?

From: Marc Maiffret (marc@eeye.com)
Date: 01/30/02 

From: "Marc Maiffret" <marc@eeye.com>
To: <d.kindred@telesciences.com>, <focus-ms@securityfocus.com>
Date: Wed, 30 Jan 2002 13:02:34 -0800

Microsoft MSN Messenger sends out UPNP broadcasts. Are you running
messenger?

Signed,
Marc Maiffret
Chief Hacking Officer
eEye Digital Security
T.949.349.9062
F.949.349.9538
http://eEye.com/Retina - Network Security Scanner
http://eEye.com/Iris - Network Traffic Analyzer
http://eEye.com/SecureIIS - Stop known and unknown IIS vulnerabilities

| -----Original Message-----
| From: David L Kindred (Dave) [mailto:kindred@telesciences.com]
| Sent: Wednesday, January 30, 2002 8:46 AM
| To: focus-ms@securityfocus.com
| Subject: UPnP on Windows 2000 Pro?
|
|
| I have a Windows 2000 Pro machine that seems to be generating UPnP
| traffic (UDP port 1900). Some research on Google leads me to believe
| that UPnP just doesn't exist for Windows 2000. So, that leads to the
| following questions:
|
| 1) Are the various resources I found with Google out-of-date and is it
| possible to have UPnP running on a W2K box? If so, can it be
| disabled? How did it get enabled in the first place?
|
| 2) Is there a virus/trojan/worm that uses UDP port 1900 for its own
| purposes?
|
| 3) Is there anything else that would be generating periodic traffic on
| UDP Port 1900?
|
| Thanks.
|
| --
| David L. Kindred <mailto:d.kindred@telesciences.com>
| Unix Systems & Network Administrator Telesciences, Inc.
| Phone: +1 856 642 4184 2000 Midlantic Drive, Suite 410
| Fax: +1 856 866 0185 Mount Laurel, NJ 08054 USA
|

Relevant Pages

  • Re: Turning on Media Sharing in WMP11
    ... I believe it forms quite a reasonable network media device. ... Turning on SSDP (it was disabled as was uPnP) to Manual and then UPnP ... If there is a firewall, or NAT, built into your ... You need to open port s: ...
    (microsoft.public.windowsmedia.player)
  • Re: Disappearing of UPnP shares in Network Places after joining workstation to domain
    ... > UPnP UI is a component that exposes a UI for controlling devices. ... No other functionality is lost by disabling the UPnP ... Can you use UNC path to access the network share? ... > use NetBIOS over TCP/IP. ...
    (microsoft.public.windows.server.sbs)
  • Re: Disappearing of UPnP shares in Network Places after joining workstation to domain
    ... > UPnP UI is a component that exposes a UI for controlling devices. ... Can you use UNC path to access the network share? ... Does the issue occur on only 1 workstation or all workstations? ... > use NetBIOS over TCP/IP. ...
    (microsoft.public.windows.server.sbs)
  • Re: KELLY
    ... [[Used in conjunction with SSDP Discovery Service, ... UPnP devices on your home network. ... [[Used to locate UPnP devices on your home network. ... For security reasons and for the fact that I doubt ...
    (microsoft.public.windowsxp.general)
  • Re: KELLY
    ... [[Used in conjunction with SSDP Discovery Service, ... UPnP devices on your home network. ... [[Used to locate UPnP devices on your home network. ... For security reasons and for the fact that I doubt ...
    (microsoft.public.windowsxp.general)
Quantcast