CVE-2000-0347
MediumExploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
Risk Assessment
An attacker can remotely disrupt access to the system, leading to service outages and loss of availability.
Recommendation
It is recommended to upgrade the operating system to a newer version or implement a firewall to block unauthorized NetBIOS requests.
Other vulnerabilities in Windows 95, Windows 98
See all- CVE-1999-0387High
A legacy credential caching mechanism in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
- CVE-1999-1201Medium
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
- CVE-1999-0391High
The SMB authentication in Windows 95 and Windows 98 has a vulnerability that allows the cryptographic challenge response to be reused. An attacker can replay this response and impersonate a user.
Original NVD description (English source)
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.