CVE-2000-0328: Medium severity Microsoft Windows NT vulnerability
Published Aug 24, 1999
·Updated
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.
Affected Software
6 affected components
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp5
Event History
Aug 24, 1999
CVE Published
04:00 AM
Data Sourced
via NVD·04:00 AM
DescriptionSeverityAffected Software
Jun 2, 2000
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2000-0328?
CVE-2000-0328 is considered a critical vulnerability due to the potential for remote attackers to perform spoofing and session hijacking.
2
How do I fix CVE-2000-0328?
To mitigate CVE-2000-0328, apply the latest patches available for Windows NT 4.0, specifically any that address TCP initial sequence number generation.
3
What versions of Windows NT are affected by CVE-2000-0328?
CVE-2000-0328 affects all versions of Windows NT 4.0, including service packs 1 through 5.
4
Can CVE-2000-0328 be exploited remotely?
Yes, CVE-2000-0328 can be exploited remotely, allowing attackers to hijack network sessions.
5
What are the consequences of CVE-2000-0328 exploitation?
Exploitation of CVE-2000-0328 can lead to unauthorized access and control over active sessions, compromising sensitive data.