CVE-1999-1157: Medium severity Microsoft Windows NT vulnerability
Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Microsoft Windows NT 4.0to a version that resolves this vulnerability.Fixed in SP4 - Configuration
Do not bind multiple IP addresses to the same network interface; reconfigure hosts to ensure only a single IP is bound per physical/virtual interface to prevent triggering the ICMP Subnet Mask Address Request denial-of-service condition.
tcpip.sys / Microsoft Windows NT network configuration multiple IP addresses bound to the same network interface = avoid binding multiple IPs to same interface
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1157?
CVE-1999-1157 is classified as a denial of service vulnerability in Windows NT 4.0.
How do I fix CVE-1999-1157?
To fix CVE-1999-1157, it is recommended to upgrade to Windows NT 4.0 Service Pack 4 or later.
What does CVE-1999-1157 exploit?
CVE-1999-1157 exploits the Tcpip.sys component through ICMP Subnet Mask Address Request packets.
Which versions of Windows are affected by CVE-1999-1157?
CVE-1999-1157 affects Windows NT 4.0 versions prior to Service Pack 4.
How does CVE-1999-1157 affect network security?
CVE-1999-1157 allows remote attackers to disrupt network services causing a denial of service.