Port 5000 and Windows XP

From: Meidinger Chris (chris.meidinger_at_badenit.de)
Date: 08/13/03

  • Next message: Leonard.Ong_at_nokia.com: "RE: Getting In"
    To: "Security-Basics@Securityfocus. Com (E-Mail)" <security-basics@securityfocus.com>
    Date: Wed, 13 Aug 2003 11:28:09 +0100
    
    

    service advertisments are normally IPX, which can be used anywhere that it
    is implemented ... primarily novell

    badenIT GmbH
    System Support
     
    Chris Meidinger
    Tullastrasse 70
    79108 Freiburg

    -----Original Message-----
    From: dos cerveza [mailto:dos_cerveza@mail.com]
    Sent: Tuesday, August 12, 2003 10:38 PM
    To: Stephane Auger; security-basics@securityfocus.com
    Subject: Re: Fw: Port 5000 and Windows XP

    You are wrong.
    SAP can be used in many different evironments.
    Including Windows and Linux.
     
    ----- Original Message -----
    From: Stephane Auger <sauger@cgsi.ca>
    Date: Tue, 12 Aug 2003 13:44:36 -0400
    To: security-basics@securityfocus.com
    Subject: Fw: Port 5000 and Windows XP
     
    > I'm probably wrong, and if I am please correct me, but isn't SAP for
    Novell?
    >
    >
    > ----- Original Message -----
    > From: "matt willson" <mwillson@sbcglobal.net>
    > To: "'Gene'" <flyersfanindc@yahoo.com>;
    <security-basics@securityfocus.com>
    > Sent: Monday, August 11, 2003 8:29 PM
    > Subject: RE: Port 5000 and Windows XP
    >
    >
    > In your Network properties, there is a service, or client installed
    > called Service Advertising Protocol, which is associated with UPnP,
    > announcing and listening for connections.
    >
    > -----Original Message-----
    > From: Gene [mailto:flyersfanindc@yahoo.com]
    > Sent: Monday, August 11, 2003 12:02 PM
    > To: security-basics@securityfocus.com
    > Subject: Port 5000 and Windows XP
    >
    >
    >
    > I had reason to look at a Windows XP box and discovered port 5000
    open
    > on
    > it. Subsequent research has shown that this is normal (albeit stupid).
    >
    > However, when I connect to port 5000, I get an "HTTP/1.1 400 Bad
    > Request". Also, fport /ap shows port 5000 open, but will not associate
    > an
    > application with it. Am I overly paranoid or has this box been
    > compromised?
    >
    > Thanks
    >
    > ------------------------------------------------------------------------
    > ---
    > ------------------------------------------------------------------------
    > ----
    >
    >
    >
    ---------------------------------------------------------------------------
    >
    ----------------------------------------------------------------------------

    >
    >
    >
    ---------------------------------------------------------------------------
    >
    ----------------------------------------------------------------------------

    >

    -- 
    __________________________________________________________
    Sign-up for your own personalized E-mail at Mail.com
    http://www.mail.com/?sr=signup
    CareerBuilder.com has over 400,000 jobs. Be smarter about your job search
    http://corp.mail.com/careers
    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    ----------------------------------------------------------------------------
    

  • Next message: Leonard.Ong_at_nokia.com: "RE: Getting In"