home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Columbia Kermit
/
kermit.zip
/
newsgroups
/
misc.19970929-19971216
/
000246_news@newsmaster….columbia.edu _Tue Nov 11 20:45:23 1997.msg
< prev
next >
Wrap
Internet Message Format
|
2020-01-01
|
3KB
Return-Path: <news@newsmaster.cc.columbia.edu>
Received: from newsmaster.cc.columbia.edu (newsmaster.cc.columbia.edu [128.59.35.30])
by watsun.cc.columbia.edu (8.8.5/8.8.5) with ESMTP id UAA17907
for <kermit.misc@watsun.cc.columbia.edu>; Tue, 11 Nov 1997 20:45:22 -0500 (EST)
Received: (from news@localhost)
by newsmaster.cc.columbia.edu (8.8.5/8.8.5) id UAA14635
for kermit.misc@watsun; Tue, 11 Nov 1997 20:45:22 -0500 (EST)
Path: news.columbia.edu!watsun.cc.columbia.edu!jaltman
From: jaltman@watsun.cc.columbia.edu (Jeffrey Altman)
Newsgroups: comp.protocols.kermit.misc
Subject: Re: NT Service Pack 3, OOB and rlogin
Date: 12 Nov 1997 01:45:19 GMT
Organization: Columbia University
Lines: 44
Message-ID: <64b1nf$lh3$1@apakabar.cc.columbia.edu>
References: <64aqqv$6nn$1@chagall.cti.nl>
NNTP-Posting-Host: watsun.cc.columbia.edu
Xref: news.columbia.edu comp.protocols.kermit.misc:8030
In article <64aqqv$6nn$1@chagall.cti.nl>, Pim Zandbergen <pim@cti.nl> wrote:
: After installing Service Pack 3 on my NT box, I noticed all sorts of
: garbled characters when using rlogin, especially when pressing my
: interrupt character.
:
: Then I suddenly remembered reading that Microsoft simply disabled OOB data
: in their TCP/IP stack, in order to protect Windows against denial-of-service
: attacks.
:
: Does anyone know whether there is another NT fix that will re-enable OOB
: data ?
>From Kermit-95 BUGS.TXT:
279. RLOGIN versus Microsoft's "WINNUKE" Patches (M) - FIXED
In May 1997 hackers discovered that any Windows 95 or NT system could
be crashed by sending TCP Out Of Band (OOB) data to it. Microsoft's
reaction was to publish a "hotfix" for Windows NT that disabled
processing of OOB data by Winsock; refer to Microsoft Knowledge Base
Document Q143478 [winnt], "Stop 0A in TCPIP.SYS When Receiving Out Of
Band (OOB) Data". But RLOGIN protocol works by using OOB data, and
therefore if you have installed these fixes, you will not be able to
use RLOGIN. This situation was addressed in a second "hotfix" issued
May 24. Each fix is simply a replacement of the TCP/IP stack
(TCPIP.SYS). You can (and should) install the latest one whether or
not you installed the first one. As of this writing there is no fix
from Microsoft for Windows 95.
NOTE: If Windows NT 4.0 Service Pack 3 has been installed, the
Post-SP3 OOB fix must be installed, since SP3 contains the first
version of the OOB fix.
Post-SP3 fixes are available from Microsoft's FTP site.
Jeffrey Altman * Sr.Software Designer * Kermit-95 for Win32 and OS/2
The Kermit Project * Columbia University
612 West 115th St #716 * New York, NY * 10025 * (212) 854-1344
http://www.columbia.edu/kermit/k95.html * kermit-support@columbia.edu