CVE-2000-0328

Medium

Published: 24/08/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

24.66%

98th percentile - higher than 98% of all known CVEs

Summary

Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), allowing remote attackers to perform spoofing and session hijacking.

Risk Assessment

Attackers can exploit this vulnerability to take control of user sessions, potentially leading to unauthorized access to data and resources.

Recommendation

It is recommended to upgrade the system to a newer version that is not vulnerable to this flaw and to implement additional security measures such as network traffic monitoring.

Original NVD description (English source)

Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.