CVE-1999-0909 Security feature bypass in n/a
Remote attackers can bypass IP source routing restrictions on multihomed Windows systems using malformed packets with IP options.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-0909?
CVE-1999-0909 is a high-severity vulnerability in Microsoft Windows 98se, published on 4 Jan 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.
Weakness: CWE-264
Which versions are affected by CVE-1999-0909?
It affects 4 products.
Products include Microsoft Terminal Server, Microsoft Windows 95, Microsoft Windows 98se, Microsoft Windows Nt.
How do I fix CVE-1999-0909?
No fix has been published for CVE-1999-0909 yet. Limit exposure of the affected software until one is available.
Is CVE-1999-0909 being exploited?
There is no known exploitation of CVE-1999-0909 in the wild and no public exploit code.
Other vulnerabilities in Microsoft Windows 98se
- CVE-2006-4465 Code injection in n/a
- CVE-2007-2593 Security feature bypass in n/a
- CVE-1999-0391 Auth bypass in n/a
- CVE-2000-0259 The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain
- CVE-2001-0540 Denial of service in n/a
Sources
Also known as GHSA-wrg2-pxvh-4rg2.