CVE-1999-0969
MediumExploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop.
Risk Assessment
Attackers can exploit this vulnerability to disrupt service availability within the organization, potentially leading to downtime and loss of access to systems.
Recommendation
It is recommended to update Windows NT and implement appropriate firewall rules to block suspicious RPC packets.
Original NVD description (English source)
The Windows NT RPC service allows remote attackers to conduct a denial of service using spoofed malformed RPC packets which generate an error message that is sent to the spoofed host, potentially setting up a loop, aka Snork.