SMB: NetSession Enumeration
This signature detects connections to the NetSession Service. Without authenticating, attackers can use this service to determine who has connected to shares on a target host and thus gain resource permission information.
Extended Description
A remote information disclosure vulnerability affects Microsoft Windows. This issue is due to a failure of the application to securely store potentially sensitive system information. An attacker may leverage this issue to disclose the user names of all users connected to a network share, potentially facilitating further attacks against affected computers.
Affected Products
Microsoft windows_xp_media_center_edition
References
BugTraq: 12486
CVE: CVE-2005-0051
URL: http://www.microsoft.com/technet/security/Bulletin/MS05-007.mspx
Short Name
SMB:ENUM:NETSESSION
Severity
Warning
Recommended
False
Recommended Action
None
Category
SMB
Keywords
CVE-2005-0051 Enumeration NetSession bid:12486
Release Date
02/08/2005
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Microsoft
CVSS Score
7.5