OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Loschiavo, Dave (DLoschiavofrcc.cc.ca.us)
Date: Tue Jul 03 2001 - 18:17:20 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Looks like I should have supplied one more piece of information... This is
    on Windows 2000 Profesional SP2.

    -----Original Message-----
    From: Lane Weast
    To: 'focus-mssecurityfocus.com'
    Sent: 7/3/01 5:25 AM
    Subject: RE: http://*.0.0.0.0

    A clip from MS Supprot

    If a computer is in a state where it has no valid IP address lease (for
    example, when starting or when the lease has expired), the computer's
    TCP/IP
    stack is initialized with the address 0.0.0.0.

    If, in this state, an ARP request with sender's IP address 0.0.0.0 is
    received, the above events will be logged.

    For additional information on the ICMP hotfix, please see the following
    article in the Microsoft Knowledge Base:

    ARTICLE-ID: Q154174
    TITLE : Invalid ICMP Datagram Fragments Hang Windows NT, Windows 95

    > -----Original Message-----
    > From: Loschiavo, Dave [mailto:DLoschiavofrcc.cc.ca.us]
    > Sent: Monday, July 02, 2001 9:59 AM
    > To: 'focus-mssecurityfocus.com'
    > Subject: http://*.0.0.0.0
    >
    >
    > What is the significance (if any) of finding http://*.0.0.0.0 in the
    > "Trusted Sites" of IE5.5? This entry is always listed when I
    > open IE. I can
    > delete it, but when I close and re-open IE it returns.
    >