CVE-2002-1712

Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.

Affected products

Windows 2000

Microsoft Windows 2000

All versions

Microsoft Windows Nt

= 4.0

Fix

Available

CVSS 2.0

5.0 MEDIUM

EPSS

25.8% (98th percentile)

NVD status

Modified

Published

2005-06-21