Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Windows_2000 | Microsoft | * | * |
| Windows_95 | Microsoft | * | * |
| Windows_98 | Microsoft | * | * |
| Windows_nt | Microsoft | 4.0 (including) | 4.0 (including) |
References
- http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0116.html
- http://www.nai.com/research/covert/advisories/045.asp
- http://www.securityfocus.com/bid/1620
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5168
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1079
- http://archives.neohapsis.com/archives/ntbugtraq/2000-q3/0116.html
- http://www.nai.com/research/covert/advisories/045.asp
- http://www.securityfocus.com/bid/1620
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5168
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1079