Buffer Overflow Vulnerability

[Guest]

Help,

A pre-SP1 fix and Service Pack 1 fixed the Buffer Overflow Vulnerability.
But I keep getting systems (XP Home\Pro) with this Vulnerability. These
computers already have SP2 on them but our Network folks states these
computer are not fixed. How to fix this problem. Thanks.

 

[Robert Moir]

Help,

A pre-SP1 fix and Service Pack 1 fixed the Buffer Overflow
Vulnerability. But I keep getting systems (XP Home\Pro) with this
Vulnerability. These computers already have SP2 on them but our
Network folks states these computer are not fixed. How to fix this
problem. Thanks.

What problem exactly? What exact security issue are you seeing, and how are
the "network folks" determining that they are not fixed.

--

 

[Guest]

Our Network Folks states that it had port 113 open and they say almost all
computers with “Buffer Overflow vulnerability†have port 113 open – this
shows that they were compromised.

 

[Woody]

Have a look here.

http://www.grc.com/port_113.htm

Woody

 

[Guest]

Is there a fix? You know how Network folks are.

Have a look here.

http://www.grc.com/port_113.htm

Woody

 

[Woody]

Again, go to link and read Stealthing port 113 on NAT routers section.

Woody

 

[Guest]

I have read the section but I will need a little more ammo. Just going to
our network folks and tell them it is on their end to fix this problem will
not go well. Maybe they are being paranoid but they are blocking my users by
MAC address when they find a particular problem such as this "Buffer Overflow
Vulnerability" on a system.

 

[Robert Moir]

Is there a fix? You know how Network folks are.

The "fix" would be to determine what software you are running that is
opening this port and go from there - either your network people have a fair
point (I wouldn't expect this to be open by default on a windows machine),
or you're running software that requires it in which case they need to deal
with that, or whatever tool they are using to determine this port is open is
wrong.

In any case, the answer isn't just applying some "patch" or other.

--

 

[Steve N.]

Have a look here.

http://www.grc.com/port_113.htm

Woody

It's a very good but old article and XP SP2 FW considerations are not
covered.

Steve

 

[Guest]

Thanks. I will look for a program that will scan a system for open ports and
what is requiring the port open.