Warning: ShareSniffer Released

Article View: comp.security.firewalls

Article #243

Back to comp.security.firewalls Previous Next

#243

From: Lawrence Baldwin
Date: Fri, 23 Feb 2001 13:22

23 lines
1986 bytes

The last thing I want to do is give this guy any press, but figured I'd
send a heads up:

http://www.sharesniffer.com/FAQ.html#Q-001

Advocates utilizing the open shares for extra disk space "...because
it's there".

My biggest concern is that it utilizes a newsgroup repository to collect
and dissemenate IP addresses with known open shares.  Others (including
automated worms) could easily leverage this data, facilitating system
compromises.


Expect an increase in Netbios scans over the coming days....sigh.


lb.
-------------------------
Lawrence Baldwin
Protocol Scientist
678-624-0924
http://www.mynetwatchman.com/about.htm - I'm under attack, now what?

Technical Details

Message-ID: <3A966412.9336DCD8@mynetwatchman.com>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!cyclone-sf.pbi.net!63.208.208.143!feed2.onemain.com!feed1.onemain.com!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news3.atl.POSTED!not-for-mail

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,b3c453f70036b961,start
X-Google-Attributes: gidf922c,public
X-Google-Thread: 10090f,b3c453f70036b961,start
X-Google-Attributes: gid10090f,public
X-Google-Thread: f5dc1,b3c453f70036b961,start
X-Google-Attributes: gidf5dc1,public
X-Google-Thread: 113850,b3c453f70036b961,start
X-Google-Attributes: gid113850,public
X-Google-ArrivalTime: 2001-02-23 05:24:03 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!cyclone-sf.pbi.net!63.208.208.143!feed2.onemain.com!feed1.onemain.com!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news3.atl.POSTED!not-for-mail
Message-ID: <3A966412.9336DCD8@mynetwatchman.com>
From: Lawrence Baldwin <baldwinlSPAMMENOT@mynetwatchman.com>
X-Mailer: Mozilla 4.7 [en] (WinNT; U)
X-Accept-Language: en
MIME-Version: 1.0
Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable
Subject: Warning: ShareSniffer Released
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 23
Date: Fri, 23 Feb 2001 08:22:26 -0500
NNTP-Posting-Host: 208.61.64.72
X-Trace: news3.atl 982934547 208.61.64.72 (Fri, 23 Feb 2001 08:22:27 EST)
NNTP-Posting-Date: Fri, 23 Feb 2001 08:22:27 EST