PT-1998-1043 · Microsoft · Windows Nt

Published 1998-02-14 · Updated 2008-09-09 · CVE-1999-0225

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows NT version 4.0

Description The issue allows remote attackers to cause a denial of service by sending a malformed SMB logon request. This request has an actual data size that does not match the specified size.

Recommendations For Windows NT version 4.0, apply configuration changes to restrict access to SMB logon requests until a fix is available. As a temporary workaround, consider restricting SMB logon requests with mismatched data sizes to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-0225

Affected Products

Windows Nt

References · 3

• http://nai.com/nai_labs/asp_set/advisory/25_windows_nt_dos_adv.asp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-0225 · Security Note
• http://microsoft.com/technet/support/kb.asp?ID=180963 · Note