http://grc.com/port_1026.htm
http://www.looknstop.com/Fr/faq.htm
http://www.wilderssecurity.com/arc [...] p?board=37
Port 1026 (Win NT)
Service: MSTASK (mstask.exe)
What is MSTASK?
MSTask (Microsoft Task Scheduler) is an application that provides services for task scheduling.
Vulnerability: Denial-of-Service
Windows NT/2000 is vulnerable to a denial of service attack, due to a vulnerability in the Microsoft Task Scheduler (MSTask.exe). An attacker can send random characters to port 1026, where MSTask.exe listens and as a result slow down a vulnerable machine and possibly freeze it completely.
MSTask.exe only permits connections through the local host, limiting this to a local attack. However, if any local proxy (i.e. Winproxy or Proximitron) is installed on the system, a remote attacker can connect to port 1026 via local proxy and perform this attack remotely. The system must be rebooted to regain normal functionality.
Hot to fix?
* Simply set your firewall to block access to port 1026
* You can also set your firewall to block mstask.exe
