[Snort-users] Re: Snort-users digest, Vol 1 #3238 - 10 msgs

djmurd at ...5190... djmurd at ...5190...
Thu Jun 5 09:15:13 EDT 2003


With respect to your UPNP traffic - there is a service on
Windows XP (SSDP Discovery or something very close) that
will attempt to "ask the network" about configurable devices
and "attempt to configure" or "manage" devices on the network.
This is UPNP.  Security = Naught.

Suggest you have the users disable UPNP on thier XP systems.

MSFT article describing UPNP:
http://support.microsoft.com/default.aspx?scid=kb;en-us;323713

General article discussing UPNP vulnerabilities:
http://support.microsoft.com/default.aspx?scid=kb;en-us;315000

Don Murdoch, Systems Engineer





More information about the Snort-users mailing list