Re: Possible security problem?

From: Hans Aberg (haberg_at_math.su.se)
Date: 07/29/05


Date: Thu, 28 Jul 2005 23:06:56 GMT

In article <3ksmtiF104qggU1@individual.net>, Ilgaz Ocal
<Ilgaz@spamcop.net> wrote:

> Well if you see a strange command connecting to net, try running
> Terminal, type "man (command name)" , e.g.
>
> cable25-100:/etc ilgaz$ man nmbd
>
> NAME
> nmbd - NetBIOS name server to provide NetBIOS over IP naming services
> to clients
> (snip arguments part)
> DESCRIPTION
> This program is part of the samba(7) suite.
>
> nmbd is a server that understands and can reply to NetBIOS over IP name
> service requests, like those produced by SMB/CIFS clients such as Win-
> dows 95/98/ME, Windows NT, Windows 2000, Windows XP and LanManager
> clients. It also participates in the browsing protocols which make up
> the Windows "Network Neighborhood" view.
>
> Have a nice day

One can also look at <http://en.wikipedia.org/wiki/NetBIOS>, which says:

...
If someone is already utilising the NetBIOS name plus type, it is the
responsibility of the Name service, running on the host that owns the
name, to send a "Node Conflict" message out to absolutely everyone it can
possibly find, including on all other transports. Joy.
It may amuse people to know that there is a long-standing bug in
Microsoft's NetBIOS stack implementation in Windows NT...

-- 
  Hans Aberg