[Patched] Windows Firewall bypass

m00nbl00d · May 8, 2012

[...]
Since Windows operating systems now come with a firewall (“Windows firewall” with Windows XP SP2 and “Windows Firewall with Advanced Security” with Vista and newer OSes) that can have multiple policies, depending on the current location of the machine (home, work or public networks), this sounded like a perfect idea for preventing NBNS attacks. In this scenario, an administrator that controls client machines through group policies could allow NBNS in home and work networks and disable it completely in public networks. While not perfect, this still offers a certain (and I’d say decent) amount of protection.

However, while testing this I noticed that the Windows firewall has a nasty bypass vulnerability (the now patched CVE-2012-0174 vulnerability).
[...]
Click to expand...

More: -https://secure.dshield.org/

-https://technet.microsoft.com/en-us/security/bulletin/ms12-032

These are not affected:

Windows XP Service Pack 3
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems

I always have NetBIOS disabled.

Log in or Sign up

[Patched] Windows Firewall bypass

m00nbl00d Registered Member

Log in or Sign up

[Patched] Windows Firewall bypass

m00nbl00d Registered Member

Useful Searches