PT-1998-1194 · Microsoft · Windows

Published 1998-10-05 · Updated 2017-12-19 · CVE-1999-1291

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to a fixed version

Description The issue concerns the TCP/IP implementation, allowing remote attackers to reset connections. This is achieved by forcing a reset via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1291

Affected Products

Windows

References · 3

• http://securityfocus.com/archive/1/10789 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1291 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1383 · Note