CVE

Id
1234  
CVE No.
CVE-1999-1254  
Status
Candidate  
Description
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.  
Phase
Proposed (20010912)  
Votes
ACCEPT(3) Cole, Frech, Wall | MODIFY(1) Meunier | NOOP(2) Christey, Foat  
Comments
Christey> Need to get feedback from MS on this. | Christey> (prompted from Pascal Meunier) should this be treated | as a general design issue with ICMP? Or is it a specific | implementation flaw that only affects Reliant? | Meunier> The description is too narrow and incorrect. Spoofed ICMP | redirect messages can be used to setup man-in-the-middle attacks | instead of a DoS. There"s no reason that this behavior would be | limited to Windows, as it is specified by the standard. As I said | elsewhere, ICMP messages should not be acted upon without access | controls.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
3448 1234 CVE-1999-1254 NTBUGTRAQ:19990308 Winfreeze EXPLOIT Win9x/NT  View
3449 1234 CVE-1999-1254 URL:http://marc.info/?l=ntbugtraq&m=92099515709467&w=2  View
3450 1234 CVE-1999-1254 XF:win-redirects-freeze(1947)  View

Related JVN