Bugtraq mailing list archives
Windows NT 4.0 Service Pack 6A Breaks IP Forwarding
From: zeio () IX NETCOM COM (Brendan Howes)
Date: Thu, 25 Nov 1999 11:26:43 -0500
While recently evaluating Windows NT 4.0 Service Pack 6A (Domestic Encryption) to fix the "non-administrators can't connect to Lotus Notes" (and use AT&T VNC software) I discovered that Service Pack 6A breaks IP forwarding from the RAS WAN interface to the Ethernet interface. I attempted to use TinySoftware's Winroute 4.0 and 3.04a, both would complete a dial to the ISP authenticate properly then either immediately hang up or all IP operations would be interrupted. Sygate did work on Service Pack 6A. An administrator at the ISP indicated to me that the TCP/IP protocol was never initiated by my OS. Upon re-installing Service Pack 6, the problem was corrected. I believe this information is meritorious and should be passed on to make it clear to Microsoft should take more time and consideration when preparing service packs which provide fixes to many of the vulnerabilities presented here. A more technical inspection of this issue is warranted. Hardware/Software Problem Found On: Windows NT 4.0 Service Pack 6 (6 and 6A) TinySoftware WinRoute Pro 4.0, 4.1 and 3.04a 3COM EL3C905B-TX With Driver el90xnd4.sys 3.50.40 / el90xbc4.sys 1.60.00.0000 x86 SMP (2 x Pentium II 450) / 256MB MEM SuperMicro P6DGU (Dual Slot 1 GX Based, AMI BIOS, MPS 1.4)
Current thread:
- Re: local users can panic linux kernel (was: SuSE syslogd, (continued)
- Re: local users can panic linux kernel (was: SuSE syslogd Darren Reed (Nov 24)
- [w00giving '99 #5 and w00news]: UnixWare 7's su Matt Conover (Nov 25)
- Buffer Overflow Survey Paper Crispin Cowan (Nov 22)
- Operational Issues: Applications & Appliances (was: Buffer Overflow Survey Paper) Crispin Cowan (Nov 23)
- [ COBALT ] Security Advisory - Sendmail Jeff Bilicki (Nov 24)
- Re: Operational Issues: Applications & Appliances (was: Buffer Overflow Survey Paper) Scott Zimmerman (Nov 24)
- Re: Operational Issues: Applications & Appliances (was: Buffer Overflow Survey Paper) Simple Nomad (Nov 24)
- Netscape communicator 4.x Javascript security flaw Ahmed Ghandour (Nov 24)
- Re: Netscape communicator 4.x Javascript security flaw Metal Hurlant (Nov 26)
- Re: Netscape communicator 4.x Javascript security flaw Ahmed Ghandour (Nov 26)
- Windows NT 4.0 Service Pack 6A Breaks IP Forwarding Brendan Howes (Nov 25)
- Oracle Web Listener Mnemonix (Nov 25)
- [w00giving '99 #6]: UnixWare 7's Xsco Matt Conover (Nov 25)
- Re: Operational Issues: Applications & Appliances (was: Buffer Overflow Survey Paper) Mark Seiden (Nov 24)
- Netscape Communicator 4.7 - Navigator Overflows Mike Boto (Nov 24)
- BindView Security Advisory: SSR Denial of Service BindView Security Advisory (Nov 24)
- Re: BindView Security Advisory: SSR Denial of Service Alan Cox (Nov 24)
- Oracle 8i questions Brock Tellier (Nov 23)
- Printer Vulnerabilities (Tektronix and JetDirect) Elias Levy (Nov 23)
- Re: local users can panic linux kernel (was: SuSE syslogd advisory) Darren Reed (Nov 20)
- Re: local users can panic linux kernel (was: SuSE syslogd advisory) Cy Schubert - ITSD Open Systems Group (Nov 23)