CVE-2000-1039

Windows 95 98 98SE ME NT - Denial of Service via TCP Connection Flood

Title source: llm

Description

Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.

References (5)

Core 5

Core References

Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert

http://www.cert.org/advisories/CA-2000-21.html

Various Sources vendor-advisory x_refsource_bindview

http://razor.bindview.com/publish/advisories/adv_NAPTHA.html

Third Party Advisory mailing-list x_refsource_win2ksec

http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0105.html

Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/2022

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-091

Scores

EPSS 0.4583

EPSS Percentile 98.7%

Details

Status published

Products (5)

microsoft/windows_95

microsoft/windows_98

microsoft/windows_98se

microsoft/windows_me

microsoft/windows_nt 4.0

Published Jan 09, 2001

Tracked Since Feb 18, 2026