CVE-2002-1712

Microsoft Windows 2000 - Denial of Service

Title source: rule
STIX 2.1

Description

Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.

Exploits (2)

exploitdb WORKING POC VERIFIED
by 3APA3A · cdoswindows
https://www.exploit-db.com/exploits/21246
exploitdb WORKING POC VERIFIED
by 3APA3A · cdoswindows
https://www.exploit-db.com/exploits/21245

Scores

EPSS 0.4986
EPSS Percentile 97.8%

Details

Status published
Products (2)
microsoft/windows_2000 (2 CPE variants)
microsoft/windows_nt 4.0 (24 CPE variants)
Published Dec 31, 2002
Tracked Since Feb 18, 2026