CVE-1999-0288
MediumExploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
The WINS server in Microsoft Windows NT 4.0 before SP4 is vulnerable to an attack that can lead to denial of service by sending invalid UDP frames to port 137. Attackers can exploit this vulnerability by flooding the server with random packets.
Risk Assessment
Denial of service can lead to downtime of network services, affecting organizational operations and potentially resulting in data loss or reputational damage.
Recommendation
It is recommended to update the system to the latest version to mitigate this vulnerability and to monitor network traffic for detecting and blocking suspicious packets.
Original NVD description (English source)
The WINS server in Microsoft Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service (process termination) via invalid UDP frames to port 137 (NETBIOS Name Service), as demonstrated via a flood of random packets.