CVE-2000-0305
HighExploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
Windows 95, 98, 2000, NT 4.0, and Terminal Server systems are vulnerable to a denial of service attack that can be executed by a remote attacker. The attack involves sending a large number of identical fragmented IP packets, leading to issues with their reassembly.
Risk Assessment
The organization may experience service outages, which can lead to data loss and decreased system performance. An attacker could exploit this vulnerability to disrupt critical application operations.
Recommendation
It is recommended to update operating systems to the latest versions and implement traffic filtering to minimize the risk of denial of service attacks.
Original NVD description (English source)
Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability.