CVE-1999-1463: Undefined Security Weakness

Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service crash by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session...