Description
Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00371.html ↗
- http://seclists.org/bugtraq/2001/Jan/0271.html ↗
- https://www2.sans.org/reading_room/whitepapers/win2k/185.php ↗
- http://www.securityfocus.com/bid/2221 ↗
- http://seclists.org/bugtraq/2001/Jan/0264.html ↗
- http://seclists.org/bugtraq/2001/Jan/0298.html ↗
- http://seclists.org/bugtraq/2001/Jan/0276.html ↗
- http://seclists.org/bugtraq/2001/Jan/0289.html ↗
- http://seclists.org/bugtraq/2001/Jan/0274.html ↗
- http://seclists.org/bugtraq/2001/Jan/0269.html ↗