I can establish a telnet session to my system while in the office
netsat output = xxx.xxx.xxx.xxx:5000 ESTABLISHED

but I am unable to get anyway through it, I want to make sure that no one else can also, there are some other ports as well but I have since shut those down. What is the process for utilizing a vunerability via this method?

regards
just checking to save myself some headaches

Go into you services , and disable the SSDP Discovery Service. Doing this will also disable universal plug and play as that service is required by it.

That should turn off TCP port 5000.

Thanks Grinler

Thanks Grinler

There were a few exploits written for the UPnP vulnerability...Check THIS link for lots of information on them..HERE'S some code for the buffer overflow exploit so you can see how it works...

Thanx for the info Milamber never knew of this hole. Very helpful and gonna add some firewall rules now