CVE-1999-0444: Medium severity Microsoft Windows 95 vulnerability
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Block or filter malicious ARP packets at the network perimeter and/or on intermediate devices (firewall, router, switch). Isolate affected hosts from untrusted networks and apply packet-filtering rules to drop malformed or unexpected ARP traffic.
- Operational
Close or dismiss the message boxes generated by the attack, clear or rotate any log files that were filled by the malicious ARP packets, and reboot affected systems if necessary to restore normal operation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0444?
CVE-1999-0444 is categorized as a denial of service vulnerability that can significantly disrupt Windows operating systems.
How do I fix CVE-1999-0444?
To mitigate CVE-1999-0444, it is recommended to update your Windows system to a version that addresses this vulnerability.
Which Windows versions are affected by CVE-1999-0444?
CVE-1999-0444 affects Microsoft Windows NT, Windows 95, and Windows 98.
What type of attack does CVE-1999-0444 involve?
CVE-1999-0444 involves remote attackers exploiting malicious ARP packets to trigger a denial of service.
Can CVE-1999-0444 impact network performance?
Yes, CVE-1999-0444 can lead to degraded network performance due to the disruptive message box displays and log file congestion.