CVE-2000-0328

Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/604
http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.19990824165629.00abcb40%40192.168.124.1
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-046

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_nt:4.0:::::::*
	cpe:2.3:o:microsoft:windows_nt:4.0:sp1::::::
	cpe:2.3:o:microsoft:windows_nt:4.0:sp2::::::
	cpe:2.3:o:microsoft:windows_nt:4.0:sp3::::::
	cpe:2.3:o:microsoft:windows_nt:4.0:sp4::::::
	cpe:2.3:o:microsoft:windows_nt:4.0:sp5::::::

History

07 Nov 2023, 01:55

Type	Values Removed	Values Added
References	{'url': 'http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.19990824165629.00abcb40@192.168.124.1', 'name': '19990824 NT Predictable Initial TCP Sequence numbers - changes observed with SP4', 'tags': [], 'refsource': 'BUGTRAQ'}	() http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.19990824165629.00abcb40%40192.168.124.1 -

Information

Published : 1999-08-24 04:00

Updated : 2024-02-28 10:24

NVD link : CVE-2000-0328

Mitre link : CVE-2000-0328

CVE.ORG link : CVE-2000-0328

JSON object : View

Products Affected

microsoft

windows_nt

CWE

NVD-CWE-Other

{"id": "CVE-2000-0328", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "1999-08-24T04:00:00.000", "references": [{"url": "http://www.securityfocus.com/bid/604", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/templates/archive.pike?list=1&msg=4.1.19990824165629.00abcb40%40192.168.124.1", "source": "cve@mitre.org"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-046", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and session hijacking."}], "lastModified": "2023-11-07T01:55:16.907", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E53CDA8E-50A8-4509-B070-CCA5604FFB21"}, {"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BDCBCB8-DAA3-465F-ADDE-9143B8251989"}, {"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B86E0671-ED68-4549-B3AC-FD8BD79B0860"}, {"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB76E7EC-C396-4537-9065-4E815DA7097C"}, {"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CD026E2-B073-40A6-AD4A-8C76B9169B01"}, {"criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:sp5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBFB3E49-3FB5-4947-856D-727CBFFBA543"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}