First Response's Information Security Blog

Flaw in NetBIOS Could Lead to Information Disclosure (824105)

Microsoft Security Bulletin MS03-034

Flaw in NetBIOS Could Lead to Information Disclosure (824105)

Severity Rating : Low

This vulnerability involves NetBios Name Service, under certain conditions an attacker could exploit this vulnerability by sending query to the target system and then examine the response to see if it included any random data from that system’s memory.

The vulnerability can best be mitigated by employing a software or hardware firewall that will block port UDP port 137.

Welcome

Welcome everyone,

I hope to make this blog a place for people to learn more about information security and how to become aware on how to protect their assets. I hope to provide you with the following :

Security related news
Reviews on harware or software technologies relating to security
Tips on how to best implement security counter measures

If there is anything that you would like to see drop me a e-mail and let me know.

Thanks,

Dave Nardoni