CVE-1999-0909: High severity Microsoft Terminal Server vulnerability
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer" vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable IP source routing processing on multihomed Windows systems to prevent bypass via malformed packets containing IP options (Spoofed Route Pointer).
Windows (multihomed systems) IP source routing = disabled - Compensating control
Block or drop IPv4 packets that include IP options (source-routing options) at the network perimeter and on host-based firewalls for multihomed Windows hosts to prevent bypassing of IP source routing restrictions.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0909?
CVE-1999-0909 is considered a critical vulnerability due to its ability to allow remote attackers to bypass IP source routing restrictions.
How do I fix CVE-1999-0909?
The recommended fix for CVE-1999-0909 is to apply the security patches provided by Microsoft for the affected Windows systems.
Which systems are affected by CVE-1999-0909?
CVE-1999-0909 affects multihomed Windows systems, including various versions of Windows NT, Windows 95, and Windows 98SE.
What impact can CVE-1999-0909 have on my network?
If exploited, CVE-1999-0909 can enable attackers to send malicious packets that can compromise the security and integrity of your network.
How can I determine if my system is vulnerable to CVE-1999-0909?
You can determine if your system is vulnerable to CVE-1999-0909 by checking if you are using any affected versions of Windows and if the necessary patches have been applied.