Re: Warning: ShareSniffer Released

Article View: comp.security.firewalls

Article #265

Back to comp.security.firewalls Previous Next

#265

From: Paul Zimmerman
Date: Fri, 23 Feb 2001 22:19

42 lines
2557 bytes

ShareSniffer has quite a few neat options but don't forget that
"Legion" and "SMB Scanner" are similar and have been around for quite
awhile. Unless ShareSniffer manages to get some media, I don't think
things will change much. BTW, what the heck does RTFM mean - Retrofit
or something? Thanks in advance...

--

Paul R. Zimmerman
http://zimmermantech.com
paul@zimmermantech.com


"Lawrence Baldwin" <baldwinlSPAMMENOT@mynetwatchman.com> wrote in
message news:3A966412.9336DCD8@mynetwatchman.com...
> The last thing I want to do is give this guy any press, but figured
I'd
> send a heads up:
>
> http://www.sharesniffer.com/FAQ.html#Q-001
>
> Advocates utilizing the open shares for extra disk space "...because
> it's there".
>
> My biggest concern is that it utilizes a newsgroup repository to
collect
> and dissemenate IP addresses with known open shares.  Others
(including
> automated worms) could easily leverage this data, facilitating
system
> compromises.
>
>
> Expect an increase in Netbios scans over the coming days....sigh.
>
>
> lb.
> -------------------------
> Lawrence Baldwin
> Protocol Scientist
> 678-624-0924
> http://www.mynetwatchman.com/about.htm - I'm under attack, now what?

Technical Details

Message-ID: <RmBl6.1770$yw6.119911@news1.atl>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!cyclone-sf.pbi.net!63.208.208.143!feed2.onemain.com!feed1.onemain.com!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news1.atl.POSTED!not-for-mail

References: <3A966412.9336DCD8@mynetwatchman.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,b3c453f70036b961
X-Google-Attributes: gidf922c,public
X-Google-Thread: f5dc1,b3c453f70036b961
X-Google-Attributes: gidf5dc1,public
X-Google-Thread: 10090f,b3c453f70036b961
X-Google-Attributes: gid10090f,public
X-Google-Thread: 113850,b3c453f70036b961
X-Google-Attributes: gid113850,public
X-Google-ArrivalTime: 2001-02-23 14:22:17 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!cyclone-sf.pbi.net!63.208.208.143!feed2.onemain.com!feed1.onemain.com!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news1.atl.POSTED!not-for-mail
From: "Paul Zimmerman" <paul@zimmermantech.com>
Newsgroups: comp.security.firewalls,bellsouth.net.security,comp.dcom.xdsl,comp.dcom.modems.cable
References: <3A966412.9336DCD8@mynetwatchman.com>
Subject: Re: Warning: ShareSniffer Released
Lines: 44
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Message-ID: <RmBl6.1770$yw6.119911@news1.atl>
Date: Fri, 23 Feb 2001 17:19:01 -0500
NNTP-Posting-Host: 208.63.197.94
X-Trace: news1.atl 982966833 208.63.197.94 (Fri, 23 Feb 2001 17:20:33 EST)
NNTP-Posting-Date: Fri, 23 Feb 2001 17:20:33 EST

Reply to Parent Message