RE: [Full-disclosure] Re: It's not that simple...

["Paul Melson" <pmelson@xxxxxxxxx>]

-----Original Message-----
> Subject: Re: [Full-disclosure] Re: It's not that simple...
>
> Not clear whether Windows 2000 allows disabling of null sessions, but the
implication is not.

http://www.brown.edu/Facilities/CIS/CIRT/help/netbiosnull.html#_Toc25025304

It's been part of Windows server hardening best-practices since at least
2001.  

Very little pity for those who haven't hardened servers and workstation
images this late in the game.

PaulM

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/