CVE Catalog

CVE-1999-1463

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
16.32%

97th percentile - higher than 97% of all known CVEs

Summary

Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.

Risk Assessment

Attackers can exploit this vulnerability to perform DoS attacks or gain unauthorized access to the system, potentially leading to serious security implications for the organization.

Recommendation

It is recommended to upgrade the system to a version with Service Pack 3 or later to mitigate this vulnerability and implement additional security measures to protect against unauthorized access.

Original NVD description (English source)

Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS