WINS update patch not installed header

Risk Level: Medium risk vulnerability  Medium

Check or Attack Name: NTWinsupFix

Platforms: Windows NT: 4.0
Description:

It is possible to crash the WINS server by sending random UDP packets to port 137 on a machine running the WINS server. The WINS Update patch prevents this denial of service.

Remedy:

Apply the latest Windows NT 4.0 Service Pack, or Windows NT 4.0 Service Pack 3 (SP3) users must also apply the post SP3 winsupd-fix patch.

To apply the latest Windows NT Service Pack, follow these steps:

  1. Open a web browser.
  2. Go to http://support.microsoft.com/support/ntserver/Content/ServicePacks and follow the directions to download the appropriate service pack for your computer.
  3. Find the installation program you downloaded to your computer.
  4. Double-click the program icon to start the installation.
  5. Follow the installation directions.

—OR—

Windows NT 4.0 Service Pack 3 (SP3) users must also apply the post SP3 winsupd-fix patch available from ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/hotfixes-postSP3/winsupd-fix/.

References:

X-Force Logo
Know Your Risks