NETBIOS: RFParalyze NULL Session DOS Attack
This signature detects attempts to exploit a known vulnerability against Microsoft Windows 95/98. Attackers can send NULL source host names within a NETBIOS session to disrupt network connectivity or cause the system to lock-up, crash, or reboot.
Extended Description
Unpredictable results, including system crashes, lock-ups, reboots, and loss of network connectivity, can occur in Windows 95/98 if a NetBIOS session packet is received with the source host name set to NULL.
Affected Products
Microsoft windows_98
Short Name
NETBIOS:DOS:RFPARALYZE
Severity
Major
Recommended
False
Recommended Action
Drop
Category
NETBIOS
Keywords
Attack CVE-2000-0347 DOS NULL RFParalyze Session bid:1163
Release Date
04/22/2003
Supported Platforms
mx-19.3
vmx-19.3
vsrx-19.2
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vmx-19.4
mx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
mx-12.3
srx-12.3
srx-branch-12.3
vsrx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Microsoft
CVSS Score
5.0