vendor:
Windows NT
by:
SecurityFocus
3.3
CVSS
MEDIUM
Denial of Service
400
CWE
Product Name: Windows NT
Affected Version From: NT 4.0
Affected Version To: NT 4.0
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 95, Windows NT
1998
NT Hostname Duplication Denial of Service Vulnerability
NT Workstations and Servers must have unique hostnames if they reside on the same network. Should an NT host attempt to use an existing hostname, the second server (with the new duplicate name) will fail to start its workstation and server services. A situation has been noted wherein a Win95 host may register the victim hostname (with a WINS server) by setting the Win95 workgroup name equal to the victim's hostname. The next time the victim host is rebooted, it will fail to start the workstation and server services as the WINS server will report that the hostname is claimed by the Win95 host.
Mitigation:
Ensure that all NT hosts have unique hostnames and that the Win95 workgroup name is not set equal to the hostname of any NT host.