M

MAC (Media Access Control), 416

MAC ACLs, 441

MAC addresses

ARP and, 373

displaying, 106

nbtstat tool, 95

switching technology and, 368

wireless networks and, 416, 429, 440-442, 444- 446

Mac OS X, 136-138

Mac systems

firewalls, 138

port scanning, 136-138

security and, 136-138

Windows connections, 137

MACH kernel, 136

Macromedia Expression Evaluator issue, 538-539

Magellan, 415

mail. See e-mail

mail exchange (MX) records, 36, 354

mailing lists, Bugtraq, 218

mailsnarf tool, 384-385

malware, 503, 634-646

man-in-the-middle (MITM) attacks, 367-368, 398, 400, 584-585

man-in-the-middle devices, 367-368

managed execution environments, 532

Management Information Base (MIB), 112-113, 115, 387-390

management protocol hacking, 404-405

MapBlast website, 421

mapping, wireless, 421-425

MapPoint, 421

MBSA (Microsoft Baseline Security Analyzer), 200

McAfee Entercept tool, 157, 643

McCanless, Keith, 619

McLain, Fred, 576

McNabb, Evan, 433

MD5 algorithm, 391-392, 550

MD5 checksums, 278

Media Access Control. See MAC

memoryhole site, 13

Meridian system, 327

Merit Networks RADB routing registry, 359

metacharacters, 226

Metcalfe, Bob, 368

MIB (Management Information Base), 112-113, 115, 387-390

Microsoft, 140-141, 505-506

Microsoft ActiveX. See ActiveX

Microsoft Baseline Security Analyzer (MBSA), 200

Microsoft DNS services, 84

Microsoft Exchange Server, 84, 92

Microsoft Internet clients , 592-615

countermeasures, 600-612

exploits, 592-600

security zones, 579, 601-610

vs. non-Microsoft clients, 613-615

Microsoft Internet Information Server. See IIS

Microsoft Knowledge Base, 90, 110

Microsoft MapPoint, 421

Microsoft OEM Support Tools, 646

Microsoft Office, 590

Microsoft Outlook Web Access (OWA), 92

Microsoft Passport vulnerability, 585, 620-621

Microsoft PPTP, 336-339

Microsoft products, 587, 592

Microsoft Proxy Server, 465

Microsoft RPC (MSRPC), 91-92, 142

Microsoft security software vendors , 642

Microsoft Service Pack. See service packs

Microsoft SQL Server, 131-133

mieliekoek.pl script, 564

MIKEY (Multimedia Internet Keying), 345

Miller, Mark, 617

MIME (Multi-Part Internet Mail Extension), 589

MIME attachments, 589

misconfiguration vulnerabilities, 386-393

MITM (man-in-the-middle) attacks, 367-368, 398, 400, 584-585

Mixter, 495

MOD-DET utility, 305

modem banks, 323

modems

brute force scripting and, 313

connections, 313

war-dialing and, 296-299

modulo-arithmetic, 227-228

Mognet sniffer, 419

Moore, Gordon, 574

Morris, Robert, 219

mount command, 244

mountd service, 239, 242, 244

Mozilla products, 619

MRTG traffic analysis, 547

MS-CHAP protocol, 337

msconfig utility, 587, 629-630, 636

MSN Messenger service, 617

MSRPC (Microsoft RPC)

countermeasures, 162-163

enumerating, 91-92

remote attacks and, 142

vulnerabilities, 142, 161-163

MSRPC port mapper, 161-163

Mudge, Peiter, 336-338, 513, 542

Multi-Part Internet Mail Extension. See MIME

Multimedia Internet Keying (MIKEY), 345

multimodem analog adapters, 297

multiport cards, 297

MX (mail exchange) records, 36, 354

MyDoom virus, 589, 635

MyDoom worm, 488, 497

MyDoom.B worm, 503

Myers, Jennifer, 225

MySQL databases, 563