NetBIOS dictionary attack

Risk Level: High risk vulnerability  High

Check or Attack Name: nbdict

Platforms: Windows for Workgroups: 3.11, Windows 95
Description:

A dictionary attack upon the resources accessible through NetBIOS was successful.

If a NetBIOS share is detected on a system that requires only a password for validation, an attempt is made to log in using passwords from a dictionary file.

Remedy:

Change your password to a password that is difficult to guess and is not part of a password dictionary.

To change your password, follow these steps:

  1. From the Windows NT Start menu, select Programs, Administrative Tools (Common), User Manager.
  2. Select the user account from the list.
  3. From the User menu, select Properties to display the User Properties dialog box.
  4. In the Password field, change the password.
  5. In the Confirm Password field, confirm the password.
  6. Click OK.
References:

X-Force Logo
Know Your Risks