CVE-1999-0104: Medium severity Microsoft Windows NT vulnerability

Published Dec 16, 1997

Updated

A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.

Affected Software

8 affected components

Microsoft Windows NT=4.0

Sun SunOS=4.1.4

Microsoft Windows NT=4.0-sp2

Caldera OpenLinux=2.0

Microsoft Windows NT=4.0-sp1

Microsoft Windows 95=0a

Sun SunOS=4.1.3u1

HP HP-UX

Event History

Dec 16, 1997

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Feb 4, 2000

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-1999-0104?

CVE-1999-0104 is classified as a high severity vulnerability due to its potential to cause denial of service.

How does CVE-1999-0104 work?

CVE-1999-0104 exploits the Teardrop-2 attack vector to disrupt the normal functioning of affected systems by sending fragmented packets.

Which systems are affected by CVE-1999-0104?

CVE-1999-0104 affects various systems including SCO OpenLinux Server 2.0, HPE HP-UX, Microsoft Windows 95, Microsoft Windows NT versions 4.0, and Sun SunOS versions 4.1.3u1 and 4.1.4.

How can I mitigate CVE-1999-0104?

Mitigation for CVE-1999-0104 may include applying relevant patches, disabling IP fragment recognition, or deploying an intrusion detection system.

Is there a patch available for CVE-1999-0104?

While specific patches may vary by vendor, users should check with their respective software providers for updates regarding CVE-1999-0104.