Re: Re: It's not that simple...

[Jason Coombs <jasonc () science org>]

Florian Weimer wrote:
> Doesn't the exploit code need a null session? 

Under Windows 2000 it does, the other OSes require authenticated 
sessions to launch the exploit.

Not clear whether Windows 2000 allows disabling of null sessions, but 
the implication is not.

http://www.microsoft.com/technet/security/bulletin/MS05-039.mspx

Regards,

Jason Coombs
jasonc () science org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/