PT-2000-1287 · Microsoft · Windows 95+4

Published 2000-05-19 · Updated 2018-10-12 · CVE-2000-0305

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version

Description The issue allows a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets. This is related to the IP Fragment Reassembly.

Recommendations For Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2000-0305

Affected Products

Terminal Server

Windows 2000

Windows 95

Windows 98

Windows Nt 4.0

References · 5

• 🔥 https://exploit-db.com/exploits/214 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2000-0305 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-029 · Note
• http://securityfocus.com/templates/advisory.html?id=2240 · Note
• http://securityfocus.com/bid/1236 · Note