Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
NETBIOS:DOS:RFPARALYZE |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
NETBIOS |
Keywords |
RFParalyze NULL Session DOS Attack |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
NETBIOS: RFParalyze NULL Session DOS Attack
This signature detects attempts to exploit a known vulnerability against Microsoft Windows 95/98. Attackers can send NULL source host names within a NETBIOS session to disrupt network connectivity or cause the system to lock-up, crash, or reboot.
Extended Description
Unpredictable results, including system crashes, lock-ups, reboots, and loss of network connectivity, can occur in Windows 95/98 if a NetBIOS session packet is received with the source host name set to NULL.
Affected Products
- Microsoft windows_95
- Microsoft windows_98
References
- BugTraq: 1163
- CVE: CVE-2000-0347
- URL: http://www.securityfocus.com/archive/1/58061