CVE-2000-0403: Medium severity Microsoft Windows NT vulnerability
The CIFS Computer Browser service on Windows NT 4.0 allows a remote attacker to cause a denial of service by sending a large number of host announcement requests to the master browse tables, aka the "HostAnnouncement Flooding" or "HostAnnouncement Frame" vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
If the Computer Browser service is not required, disable the CIFS Computer Browser service on affected Windows NT 4.0 systems to prevent processing of host announcement requests.
CIFS Computer Browser service (Windows NT 4.0) service_enabled = false - Compensating control
Block, filter or rate-limit host announcement / browse announcement traffic at network boundaries or segment affected hosts to prevent remote systems from flooding the master browse tables with host announcement requests.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0403?
CVE-2000-0403 is classified as a denial of service vulnerability.
How do I fix CVE-2000-0403?
To mitigate CVE-2000-0403, disable the CIFS Computer Browser service on Windows NT 4.0.
What systems are affected by CVE-2000-0403?
CVE-2000-0403 affects Microsoft Windows NT version 4.0.
What actions should I take if I am exposed to CVE-2000-0403?
If exposed to CVE-2000-0403, consider applying patches or disabling vulnerable services to prevent exploitation.
How does CVE-2000-0403 work?
CVE-2000-0403 works by exploiting the CIFS Computer Browser service through host announcement flooding, leading to denial of service.