CVE-1999-1361

Medium

Published: 09/05/1998(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

8.60%

94th percentile - higher than 94% of all known CVEs

Summary

Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) are vulnerable to denial of service attacks. Remote attackers can send a flood of malformed packets, causing the server to slow down and fill the event logs with error messages.

Risk Assessment

Attackers can exploit this vulnerability to disrupt server operations, potentially leading to service downtime and loss of availability for users.

Recommendation

It is recommended to upgrade the system to a newer version and implement packet filtering to minimize the risk of denial of service attacks.

Original NVD description (English source)

Windows NT 3.51 and 4.0 running WINS (Windows Internet Name Service) allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages.