Security Basics mailing list archives

Fw: Port 5000 and Windows XP


From: Stephane Auger <sauger () cgsi ca>
Date: Tue, 12 Aug 2003 13:44:36 -0400

I'm probably wrong, and if I am please correct me, but isn't SAP for Novell?


----- Original Message -----
From: "matt willson" <mwillson () sbcglobal net>
To: "'Gene'" <flyersfanindc () yahoo com>; <security-basics () securityfocus com>
Sent: Monday, August 11, 2003 8:29 PM
Subject: RE: Port 5000 and Windows XP


In your Network properties, there is a service, or client installed
called Service Advertising Protocol, which is associated with UPnP,
announcing and listening for connections.

-----Original Message-----
From: Gene [mailto:flyersfanindc () yahoo com]
Sent: Monday, August 11, 2003 12:02 PM
To: security-basics () securityfocus com
Subject: Port 5000 and Windows XP



I had reason to look at a Windows XP box and discovered port 5000 open
on
it.  Subsequent research has shown that this is normal (albeit stupid).

However, when I connect to port 5000, I get an "HTTP/1.1 400 Bad
Request".  Also, fport /ap shows port 5000 open, but will not associate
an
application with it.  Am I overly paranoid or has this box been
compromised?

Thanks

------------------------------------------------------------------------
---
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: