Title: Multiple Vendor Out Of Band Data DoS (WinNuke)
Info
Disclosure
May 07, 1997
Discovery
Unknown
Dates
Exploit
May 07, 1997
Solution
Unknown
Description
Microsoft Windows and SCO Open Server contain a flaw that may allow a remote denial of service. The issue is triggered when an out-of-band packet is sent to port 139, and will result in loss of availability for the platform.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Public
Disclosure:
OSVDB Verified
Solution
Microsoft and SCO have released a patch to address this vulnerability. Additionally, it is possible to mitigate this attack by implementing the following workaround: filter all traffic to TCP Port 139.