CVE-2000-0347: Medium severity Microsoft Windows 95 vulnerability
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable NetBIOS over TCP/IP (or otherwise disable NetBIOS/SMB network sharing) on affected Windows 95/98 systems to prevent processing of NetBIOS session requests.
Microsoft Windows 95/98 NetBIOS over TCP/IP = disabled - Compensating control
Restrict or block NetBIOS traffic from untrusted networks. Place perimeter firewall/ACL rules to block or limit NetBIOS/SMB access to Windows 95/98 hosts and allow NetBIOS traffic only from trusted management networks.
- Compensating control
Isolate Windows 95/98 systems from untrusted networks (including the Internet) by network segmentation, VLANs, or removing them from production networks until a vendor fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0347?
The severity of CVE-2000-0347 is considered to be low, as it primarily leads to a denial of service.
How do I fix CVE-2000-0347?
To fix CVE-2000-0347, it's recommended to apply any available patches for Windows 95 and Windows 98, or consider upgrading to more secure operating systems.
Which versions of Windows are affected by CVE-2000-0347?
CVE-2000-0347 affects Windows 95 and Windows 98, specifically the 'gold' version of Windows 98.
What type of attack does CVE-2000-0347 involve?
CVE-2000-0347 involves a denial of service attack through a NetBIOS session request packet with a NULL source name.
Can CVE-2000-0347 be exploited remotely?
Yes, CVE-2000-0347 can be exploited remotely by sending a specially crafted NetBIOS packet.