Exploit devastates WinNT/2K security

[Raju Mathur <raju@xxxxxxxxxxxxxxx>]

An application called SMBRelay, written by The Cult of the Dead Cow's
Sir Dystic, exploits a design flaw in the SMB (Server Message Block)
protocol on Win NT/2K boxes, easily enabling an attacker to interpose
himself between the client and the server.

http://www.securityfocus.com/analysis/195

[I think Samba boxen on the 'net are vulnerable too: this is a
protocol exploit, not an implementation exploit -- Raju]
-- 
Raju Mathur          raju@xxxxxxxxxxxxx           http://kandalaya.org/