Re: Possible security problem?
From: Hans Aberg (haberg_at_math.su.se)
Date: Thu, 28 Jul 2005 23:06:56 GMT
In article <3ksmtiF104qggU1@individual.net>, Ilgaz Ocal
> Well if you see a strange command connecting to net, try running
> Terminal, type "man (command name)" , e.g.
> cable25-100:/etc ilgaz$ man nmbd
> nmbd - NetBIOS name server to provide NetBIOS over IP naming services
> to clients
> (snip arguments part)
> This program is part of the samba(7) suite.
> nmbd is a server that understands and can reply to NetBIOS over IP name
> service requests, like those produced by SMB/CIFS clients such as Win-
> dows 95/98/ME, Windows NT, Windows 2000, Windows XP and LanManager
> clients. It also participates in the browsing protocols which make up
> the Windows "Network Neighborhood" view.
> Have a nice day
One can also look at <http://en.wikipedia.org/wiki/NetBIOS>, which says:
If someone is already utilising the NetBIOS name plus type, it is the
responsibility of the Name service, running on the host that owns the
name, to send a "Node Conflict" message out to absolutely everyone it can
possibly find, including on all other transports. Joy.
It may amuse people to know that there is a long-standing bug in
Microsoft's NetBIOS stack implementation in Windows NT...
-- Hans Aberg