WINS Server Detection

info Nessus Plugin ID 54629

Synopsis

A WINS server is running on the remote port.

Description

The remote service is a WINS (Windows Internet Name Service) server, which holds information about any NetBIOS-enabled hosts on the network.

Note that the service may allow an arbitrary user to download the list, although some versions (eg, in Windows 2008) require an IP address to be specifically trusted to download the list by default.

Solution

Determine whether or not this service should be allowed by policy and disable it if it shouldn't be.

Plugin Details

Severity: Info

ID: 54629

File Name: wins_detect.nasl

Version: 1.7

Type: remote

Published: 5/24/2011

Updated: 6/12/2020

Asset Inventory: true

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:microsoft:wins