CVE Catalog

CVE-1999-1222

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
4.65%

91th percentile - higher than 91% of all known CVEs

Summary

Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup.

Risk Assessment

Organizations may experience service outages, leading to potential loss of user trust and financial losses.

Recommendation

It is recommended to upgrade the system to a newer version and to monitor and filter DNS responses to prevent exploitation of this vulnerability.

Original NVD description (English source)

Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS host name lookup.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS