Datamation Logo

Analysts Warn of Possible TCP Port Attack

June 23, 2005
Datamation content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

Analysts are warning of a possible TCP Port attack after detecting a surge in sniffing on Port 445, which is the port associated with a recently patched Microsoft flaw.

Gartner, Inc., a major industry analyst firm based in Stamford, Conn., has issued an alert, saying the increased scanning activity may signal an impending malicious code attack exploiting a critical Windows vulnerability.

The flaw was connected to the Microsoft Windows Server Message Block (SMB) Protocol, which is associated with Port 445. The port could be used to exploit the Microsoft Incoming SMB Packet Validation Remote Buffer Overflow Vulnerability (MSO5-27). A patch for the bug was released on June 14.

”The Port 445 activity may indicate that — in the week since Microsoft released the Windows patch — attacks have reached the fourth state in this process and may be preparing a mass attack, employing the widely used SMB protocol,” Gartner analysts warned in a written statement.

The analysts note that launching a mass attack is generally a five-state process. First, a vulnerability is identified and a patch is released. Then attackers use the patch to reverse engineer the vulnerability. After that, exploit code is developed and circulated on the Internet, and then attackers scan to find vulnerable systems. The last step actually is launching an attack.

A spokesperson for Symantec Corp., an anti-virus and anti-spam company, says researchers at Symantec’s DeepSight Network detected the surge in sniffing last week. In the last several days, the surge has started to drop off, however.

Windows 2000 and Windows XP use TCP Port 445 to run SMB directly over TCP/IP to manage activities such as file sharing and communication between computers.

Analysts are advising users to make sure that all flaws are patched.

  SEE ALL
ARTICLES
 

Subscribe to Data Insider

Learn the latest news and best practices about data science, big data analytics, artificial intelligence, data security, and more.

Datamation Logo

Datamation is the leading industry resource for B2B data professionals and technology buyers. Datamation's focus is on providing insight into the latest trends and innovation in AI, data security, big data, and more, along with in-depth product recommendations and comparisons. More than 1.7M users gain insight and guidance from Datamation every year.

Advertisers

Advertise with TechnologyAdvice on Datamation and our other data and technology-focused platforms.

Advertise with Us

Our Brands


Privacy Policy Terms & Conditions About Contact Advertise California - Do Not Sell My Information

Property of TechnologyAdvice.
© 2025 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.