- Quick specs
- Price: Free
- Operating system:
- Date added: July 31, 2000
- Total Downloads: 20,001
- Downloads last week: 2
- See full specifications
- Average user rating: stars out of 3 votes
See all user reviews
Publisher's description
From Microsoft :The NetBIOS Name Server (NBNS) protocol, part of the NetBIOS over TCP/IP (NBT) family of protocols, is implemented in Windows systems as the Windows Internet Name Service (WINS). By design, NBNS allows network peers to assist in managing name conflicts. Also by design, it is an unauthenticated protocol and therefore subject to spoofing. A malicious user could misuse the Name Conflict and Name Release mechanisms to cause another machine to conclude that its name was in conflict. Depending on the scenario, the machine would as a result either be unable to register a name on the network, or would relinquish a name it already had registered. The result in either case would be the same the machine would not respond requests sent to the conflicted name anymore.
If normal security practices have been followed, and port 137 UDP has been blocked at the firewall, external attacks would not be possible. A patch is available that changes the behavior of Windows systems in order to give administrators additional flexibility in managing their networks. The patch allows administrators to configure a machine to only accept a name conflict datagram in direct response to a name registration attempt, and to configure machines to reject all name release datagrams. This will reduce but not eliminate the threat of spoofing. Customers needing additional protection may wish to consider using IPSec in Windows 2000 to authenticate all sessions on ports 137-139.
Microsoft created this patch to eliminate this security vulnerability.
More popular Encryption Software downloads
- 34,431 downloads 1. Hotspot Shield
- 11,215 downloads 2. RoboForm
- 8,899 downloads 3. Computer Use Reporter
- 6,431 downloads 4. Folder Lock
- 4,399 downloads 5. RAR Password Cracker
- See all Encryption Software downloads
User reviews
- Average user rating: 0 stars Not yet available
- My rating: 0 stars Write review
-
Showing 2 of 2 user reviewsSee all 2 user reviews
This software version | All versions -
Version: Windows 2000 NetBIOS Name Server Protocol Spoofing Vulnerability Patch
"I too run this and it keeps coming up in catchup"
-
Version: Windows 2000 NetBIOS Name Server Protocol Spoofing Vulnerability Patch
Summary: First of all, this should not have been possible. But this is not a good solution. The network should be safe from the OS to start with, and a firewall should only be an extra guard, not a basic necessity.
- See all 2 user reviews Write review
Submit your review
- See more CNET content tagged:
- Microsoft Windows 2000,
- NetBIOS,
- patch,
- protocol,
- security
