Re: Filter to block TCP port 139...

Sherwood Pekelo (spekelo@iav.com)
Wed, 14 May 1997 07:16:16 -1000 (HST)

On Tue, 13 May 1997, Yura Socolov wrote:

> > My objective: To block traffic coming in through the router on TCP port 139.
> >
> Just out of curiosity, why bother?
>
> -- yu

So that winnuke users won't kill WinXX machines... Win95, OSR 2,
WinNT3.51, WinNT 4.0, Win3.1x with 32-bit TCP/IP are all affected.

8) I had a field day testing out the office machines...

Below are links for fixes....

Fixes for the Out of Band data exploit through TCP 139 are now available
for both 3.51 and 4.0 and are now posted at:
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT40/hotfixe
s-postSP2/oob-fix
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/NT351/hotfix
es-postSP5/oob-fix

The fix for "RedButton" is now posted as well at:
ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixe
s-postSP2/sec-fix

For Win95...

http://www.mydesktop.com/features/winbug/

--
Aloha,

Sherwood