CVE-2000-1039 Denial of service in n/a

What is CVE-2000-1039?

CVE-2000-1039 is a medium-severity denial of service vulnerability in Microsoft Windows 98, published on 19 Dec 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.

Which versions are affected by CVE-2000-1039?

It affects 5 products.

Products include Microsoft Windows 95, Microsoft Windows 98, Microsoft Windows 98se, Microsoft Windows Me, Microsoft Windows Nt.

How do I fix CVE-2000-1039?

No fix has been published for CVE-2000-1039 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2000-1039 being exploited?

There is no known exploitation of CVE-2000-1039 in the wild and no public exploit code.

Other vulnerabilities in Microsoft Windows 98

• CVE-1999-0387 Information disclosure in n/a High 7.8
• CVE-2000-0330 Memory corruption in n/a High 7.6
• CVE-1999-0518 Weak cryptography in n/a High 7.5
• CVE-2000-0155 Code injection in n/a High 7.2
• CVE-2000-0979 Auth bypass in n/a Medium 6.4

All Microsoft Windows 98 vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-272q-6m92-rrfr.