CVE-1999-1463
MediumExploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.
Risk Assessment
Attackers can exploit this vulnerability to perform DoS attacks or gain unauthorized access to the system, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to upgrade the system to a version with Service Pack 3 or later to mitigate this vulnerability and implement additional security measures to protect against unauthorized access.
Other vulnerabilities in Windows NT 4.0
See all- CVE-1999-1452Low
GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.
- CVE-1999-1127High
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, allowing remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data.
- CVE-1999-1132Medium
Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as a Routing Information Field (RIF) field with a hop count greater than 7 or a list containing duplicate Token Ring IDs.
- CVE-1999-0994Medium
Windows NT with SYSKEY reuses the keystream used for encrypting SAM password hashes, allowing an attacker to crack passwords.
- CVE-1999-0987High
Windows NT improperly downloads a system policy if the domain user logs into the domain with a space at the end of the domain name.
- CVE-1999-1234Medium
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in calls to SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo.
- CVE-2000-0328Medium
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), allowing remote attackers to perform spoofing and session hijacking.
- CVE-1999-0728High
A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.
- CVE-1999-0726High
An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.
- CVE-1999-0577High
A Windows NT system's file audit policy does not log an event success or failure for non-critical files or directories.
Original NVD description (English source)
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.