Details of VAR-200005-0006

ID

VAR-200005-0006

CVE

CVE-2000-0305

TITLE

IP Packet Fragment Denial of Service Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200005-076

DESCRIPTION

Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. CPU utilization will return to normal after the attack has ceased. In some cases, this attack could produce a blue screen of death. An analysis of the exploit was posted to BugTraq on May 26, 2000 by Mikael Olsson <mikael.olsson@enternet.se>. He concludes that the DoS initated by this attack may not be related to IP fragmentation but rather to resource exhaustion and a problem in filtering bad packets by Microsoft Windows. See the message references by Mikael Olsson for a further interpretation of the mechanism of this attack

Trust: 1.35

sources: NVD: CVE-2000-0305 // BID: 1236 // VULHUB: VHN-1884 // VULMON: CVE-2000-0305

AFFECTED PRODUCTS

vendor:	microsoft	model:	windows nt	scope:	eq	version:	4.0	Trust: 1.6
vendor:	be	model:	beos	scope:	eq	version:	5.0	Trust: 1.3
vendor:	microsoft	model:	windows 2000	scope:	eq	version:	*	Trust: 1.0
vendor:	microsoft	model:	terminal server	scope:	eq	version:	*	Trust: 1.0
vendor:	microsoft	model:	windows 98	scope:	eq	version:	*	Trust: 1.0
vendor:	microsoft	model:	windows 95	scope:	eq	version:	*	Trust: 1.0
vendor:	microsoft	model:	windows 98	scope:	eq	version:	gold	Trust: 0.6
vendor:	microsoft	model:	windows 95	scope:	-	version:	-	Trust: 0.6
vendor:	microsoft	model:	terminal server	scope:	-	version:	-	Trust: 0.6
vendor:	microsoft	model:	windows 2000	scope:	-	version:	-	Trust: 0.6
vendor:	microsoft	model:	windows nt workstation sp6a	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp6	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp5	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp4	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp3	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp2	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation sp1	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt workstation	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp6	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp5	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp4	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp3	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp2	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server sp1	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt terminal server	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp6a	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp6	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp5	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp4	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp3	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp2	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server sp1	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt server	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp6a	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp6	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp5	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp4	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp3	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp2	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server sp1	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows nt enterprise server	scope:	eq	version:	4.0	Trust: 0.3
vendor:	microsoft	model:	windows	scope:	eq	version:	98	Trust: 0.3
vendor:	microsoft	model:	windows	scope:	eq	version:	95	Trust: 0.3
vendor:	microsoft	model:	windows server	scope:	eq	version:	2000	Trust: 0.3
vendor:	microsoft	model:	windows professional	scope:	eq	version:	2000	Trust: 0.3
vendor:	microsoft	model:	windows advanced server	scope:	eq	version:	2000	Trust: 0.3

sources: BID: 1236 // CNNVD: CNNVD-200005-076 // NVD: CVE-2000-0305

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2000-0305
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200005-076
value:	HIGH
Trust: 0.6
VULHUB:	VHN-1884
value:	HIGH
Trust: 0.1
VULMON:	CVE-2000-0305
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2000-0305
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
VULHUB:	VHN-1884
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-1884 // VULMON: CVE-2000-0305 // CNNVD: CNNVD-200005-076 // NVD: CVE-2000-0305

PROBLEMTYPE DATA

problemtype:

CWE-399

Trust: 1.1

sources: VULHUB: VHN-1884 // NVD: CVE-2000-0305

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200005-076

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-200005-076

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-1884 // VULMON: CVE-2000-0305

EXTERNAL IDS

db:	BID	id:	1236	Trust: 2.1
db:	NVD	id:	CVE-2000-0305	Trust: 1.8
db:	CNNVD	id:	CNNVD-200005-076	Trust: 0.7
db:	MS	id:	MS00-029	Trust: 0.6
db:	BINDVIEW	id:	20000519 JOLT2 - REMOTE DOS AGAINST NT, W2K, 9X	Trust: 0.6
db:	EXPLOIT-DB	id:	214	Trust: 0.2
db:	SEEBUG	id:	SSVID-62798	Trust: 0.1
db:	VULHUB	id:	VHN-1884	Trust: 0.1
db:	VULMON	id:	CVE-2000-0305	Trust: 0.1

sources: VULHUB: VHN-1884 // VULMON: CVE-2000-0305 // BID: 1236 // CNNVD: CNNVD-200005-076 // NVD: CVE-2000-0305

REFERENCES

url:	http://www.securityfocus.com/bid/1236	Trust: 1.8
url:	http://www.securityfocus.com/templates/advisory.html?id=2240	Trust: 1.8
url:	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-029	Trust: 1.2
url:	http://www.microsoft.com/technet/security/bulletin/ms00-029.asp	Trust: 0.6
url:	http://www.microsoft.com/technet/security/bulletin/fq00-029.asp	Trust: 0.3
url:	-	Trust: 0.1
url:	https://cwe.mitre.org/data/definitions/399.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://www.exploit-db.com/exploits/214/	Trust: 0.1

sources: VULHUB: VHN-1884 // VULMON: CVE-2000-0305 // BID: 1236 // CNNVD: CNNVD-200005-076 // NVD: CVE-2000-0305

CREDITS

Discovered by Dmitri Netes of the BindView HackerShield Development Team and publicized in a Microsoft Security Bulletin (MS00-029) on May 19, 2000.

Trust: 0.9

sources: BID: 1236 // CNNVD: CNNVD-200005-076

SOURCES

db:	VULHUB	id:	VHN-1884
db:	VULMON	id:	CVE-2000-0305
db:	BID	id:	1236
db:	CNNVD	id:	CNNVD-200005-076
db:	NVD	id:	CVE-2000-0305

LAST UPDATE DATE

2024-08-14T15:41:03.732000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-1884	date:	2018-10-12T00:00:00
db:	VULMON	id:	CVE-2000-0305	date:	2018-10-12T00:00:00
db:	BID	id:	1236	date:	2000-05-19T00:00:00
db:	CNNVD	id:	CNNVD-200005-076	date:	2005-10-12T00:00:00
db:	NVD	id:	CVE-2000-0305	date:	2018-10-12T21:29:32.420

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-1884	date:	2000-05-19T00:00:00
db:	VULMON	id:	CVE-2000-0305	date:	2000-05-19T00:00:00
db:	BID	id:	1236	date:	2000-05-19T00:00:00
db:	CNNVD	id:	CNNVD-200005-076	date:	2000-05-19T00:00:00
db:	NVD	id:	CVE-2000-0305	date:	2000-05-19T04:00:00