PT-1999-1588 · Microsoft · Windows Nt

Published 1999-12-31 · Updated 2016-10-18 · CVE-1999-1132

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows NT version 4.0

Description The issue allows remote attackers to cause a denial of service, resulting in a system crash. This can be achieved by sending extra source routing data, including a Routing Information Field (RIF) with a hop count greater than 7, or a list containing duplicate Token Ring IDs.

Recommendations For Windows NT version 4.0, as a temporary workaround, consider restricting or disabling the handling of extra source routing data to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1132

Affected Products

Windows Nt

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-1999-1132 · Security Note
• http://support.microsoft.com/support/kb/articles/Q179/1/57.asp · Vendor Advisory
• http://marc.info/?l=bugtraq&m=90763508011966&w=2 · Note
• http://marc.info/?l=ntbugtraq&m=90760603030452&w=2 · Note
• http://iss.net/security_center/static/1399.php · Note