Re: Internet Explorer Bug #4

[rkuhljr () PUERIDOMUS BR (Rubens Kuhl Jr.)]

> From: Steve Birnbaum <sbirn () NETMEDIA NET IL>
> To: BUGTRAQ () NETSPACE ORG
> Subject: Re: Internet Explorer Bug #4
> Date: Sábado, 15 de Março de 1997 15:44
> Forgetting about finding a way to get someone to sit down on the console
> of the NT machine and trying to get to your web site, is it possible to
> spoof a WINS sync to that NT server?  Hobbit's paper shows that
> NT trusts you to be who you say you are when connecting for a CIFS share.
> I'm curious if there is any more security involved in the case of an NT
> server that is set up to syncronize WINS tables with other NT servers.

WINS syncing is guarded by machine accounts (when the servers belong to the
same domain) or by domain trust relationships, not by machine names.

Rubens Kuhl Jr.