Lucene search
HistoryJan 04, 2000 - 5:00 a.m.
CVE-1999-0909
windows system
ip source routing
multihomed windows
spoofed route pointer
vulnerability.
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.3%
Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the “Spoofed Route Pointer” vulnerability.
Affected configurations
Node
microsoftterminal_server
Node
microsoftwindows_95Match0a
ORmicrosoftwindows_95Match0b
ORmicrosoftwindows_98se
ORmicrosoftwindows_ntMatch4.0
ORmicrosoftwindows_ntMatch4.0sp1
ORmicrosoftwindows_ntMatch4.0sp2
ORmicrosoftwindows_ntMatch4.0sp3
ORmicrosoftwindows_ntMatch4.0sp4
ORmicrosoftwindows_ntMatch4.0sp5
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:terminal_server | microsoft terminal server | eq | * |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.3%
Related for CVE-1999-0909