Re: Win95/98 and Novell client DoS

From: Richard Reiner (rreinerat_private)
Date: Fri Oct 08 1999 - 17:56:54 PDT

Next message: Derek J. Balling: "Re: KSR[T] Advisories #012: Hybrid Network's Cable Modems"

Previous message: Aleph One: "Microsoft Security Bulletin (MS99-030)"
Maybe in reply to: Bruce Dennison: "Win95/98 and Novell client DoS"
Next in thread: Gyorgy Camaszotisz, Novell DevNet SysOp 13: "Re: Win95/98 and Novell client DoS"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> Perhaps this has been reported.  I havent seen it.  If it has been
> previously reported, sorry.  Consider this a reminder.
>
> Novell client opens port 427 TCP.  My services file reports this port to be
> known as 'svrloc'.  You can bluescreen Win95/98 with Novell Client versions
> 3.0 and 3.0.1 by sending a SYN to this port, as you would with 'nmap -sS -p
> 427 <target>'.  This is quite fatal.  The only recovery seems to be a power
> reset.

Yes, we reported this (and posted to BUGTRAQ) late in 1998.

Next message: Derek J. Balling: "Re: KSR[T] Advisories #012: Hybrid Network's Cable Modems"
Previous message: Aleph One: "Microsoft Security Bulletin (MS99-030)"
Maybe in reply to: Bruce Dennison: "Win95/98 and Novell client DoS"
Next in thread: Gyorgy Camaszotisz, Novell DevNet SysOp 13: "Re: Win95/98 and Novell client DoS"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:07:04 PDT