CVE-2000-1079: High severity Microsoft Windows NT vulnerability

Published Aug 29, 2000

Updated

Interactions between the CIFS Browser Protocol and NetBIOS as implemented in Microsoft Windows 95, 98, NT, and 2000 allow remote attackers to modify dynamic NetBIOS name cache entries via a spoofed Browse Frame Request in a unicast or UDP broadcast datagram.

Affected Software

4 affected components

Microsoft Windows NT=4.0

Microsoft Windows 2000

Microsoft Windows 95

Microsoft Windows 98=gold

Remediation

Patch Available

http://www.securityfocus.com/bid/1620

Event History

Aug 29, 2000

CVE Published

04:00 AM

Nov 29, 2000

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1079?

CVE-2000-1079 is considered a medium severity vulnerability due to its potential for exploitation in altering NetBIOS name cache entries.

What systems are affected by CVE-2000-1079?

CVE-2000-1079 affects Microsoft Windows 95, 98, NT 4.0, and Windows 2000.

How do I fix CVE-2000-1079?

To mitigate CVE-2000-1079, ensure your systems are updated with the latest patches from Microsoft that address this vulnerability.

Can CVE-2000-1079 be exploited remotely?

Yes, CVE-2000-1079 can be exploited remotely via spoofed Browse Frame Requests.

What types of attacks are possible with CVE-2000-1079?

CVE-2000-1079 allows attackers to manipulate dynamic NetBIOS name cache entries, potentially leading to unauthorized access to resources.