CVE-1999-1463
MediumExploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.
Risk Assessment
Attackers can exploit this vulnerability to perform DoS attacks or gain unauthorized access to the system, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to upgrade the system to a version with Service Pack 3 or later to mitigate this vulnerability and implement additional security measures to protect against unauthorized access.
Original NVD description (English source)
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.

