WINS servers risk warning
p2pnet.net News:- If you’re using Windows Internet Naming Service (WINS) servers and you haven’t done any patching, you might might want to do it now, warns the SANS Internet Storm Center (ISC).
"As many of you are aware, the WINS server vulnerability (MS04-045) appears to be getting exploited," says a post, going on:
"The ISC, and other organizations have seen a marked increase in the probes directed at WINS services (42/tcp) since December 31, 2004. The Research and Education Networking ISAC has graphs showing marked increases in these probes on Internet2 via the Abilene network netflows.
"So, if you have not patched your WINS servers in respective companies or campuses, beware. Patching these systems is now overdue. Additionally, WINS services probably should not cross your border router. SO please block these ports and keep the rif-raf out in case your local Windows Server Admins have not patched for this over the holidays."
==================
See:-
warns – WINS Server Vulnerability, ISC Handlers Diary, January 4, 2005





