Search
Get a Demo

published date: October 5, 1998

CVE-1999-1291 : Spoofing Vulnerability

Description

TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target.

Product(s):

  • Microsoft Windows 95
  • Microsoft windows 95_gold
  • Microsoft windows 95_osr2.1
  • Microsoft windows 95_osr2.5
  • Microsoft windows 95_osr2
  • CVSS:5 [Critical]
  • EPSS:8.55%
  • Exploitability:10
  • In KEV:No

Question to Ask Vendors:

  1. Can you confirm whether your systems are affected by CVE-1999-1291, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-1999-1291 in your products or services, and how will you communicate updates on this issue to us as your customer?

READY TO GET RESULTS YOU CAN TRUST?

Get a Demo Contact Sales