Re: Possible security problem?

From: Hans Aberg (
Date: 07/29/05

Date: Thu, 28 Jul 2005 23:06:56 GMT

In article <>, Ilgaz Ocal
<> wrote:

> Well if you see a strange command connecting to net, try running
> Terminal, type "man (command name)" , e.g.
> cable25-100:/etc ilgaz$ man nmbd
> nmbd - NetBIOS name server to provide NetBIOS over IP naming services
> to clients
> (snip arguments part)
> This program is part of the samba(7) suite.
> nmbd is a server that understands and can reply to NetBIOS over IP name
> service requests, like those produced by SMB/CIFS clients such as Win-
> dows 95/98/ME, Windows NT, Windows 2000, Windows XP and LanManager
> clients. It also participates in the browsing protocols which make up
> the Windows "Network Neighborhood" view.
> Have a nice day

One can also look at <>, which says:

If someone is already utilising the NetBIOS name plus type, it is the
responsibility of the Name service, running on the host that owns the
name, to send a "Node Conflict" message out to absolutely everyone it can
possibly find, including on all other transports. Joy.
It may amuse people to know that there is a long-standing bug in
Microsoft's NetBIOS stack implementation in Windows NT...

  Hans Aberg