CVE Catalog

CVE-1999-1291

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
13.45%

96th percentile - higher than 96% of all known CVEs

Summary

The TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means.

Risk Assessment

Attackers can take control of connections, potentially leading to data loss or service disruption.

Recommendation

It is recommended to upgrade systems to newer versions that eliminate this vulnerability and to monitor network traffic for suspicious activities.

Original NVD description (English source)

TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS