CVE-1999-1387
MediumExploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
Windows NT 4.0 SP2 is vulnerable to a denial of service attack that may cause system crashes. Attackers can exploit malformed data or packets, leading to unpredictable system behavior.
Risk Assessment
The organization may experience downtime, affecting service availability. Potential crashes could lead to data loss or disruptions in operations.
Recommendation
It is recommended to upgrade the system to a newer version to minimize the risk of denial of service attacks. Additionally, monitoring network traffic for potential attack attempts is advised.
Original NVD description (English source)
Windows NT 4.0 SP2 allows remote attackers to cause a denial of service (crash), possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25.