VULNERABILITY INTELLIGENCE

CVE-1999-1291

CVSS score5 MEDIUM
EPSS probability13.34%
CISA KEVNot currently listed
Published1998-10-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target.

Primary references