Microsoft Windows 98 Fragmented UDP Flood Denial Of Service Vulnerability

Bugtraq ID:	8543
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Sep 04 2003 12:00AM
Updated:	Sep 04 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to warlord.
Vulnerable:	Microsoft Windows 98 SP1 Microsoft Windows 98
Not Vulnerable:	Microsoft Windows 98SE

Microsoft Windows 98 Fragmented UDP Flood Denial Of Service Vulnerability

A remote denial of service vulnerability has been reported to affect Microsoft Windows 98. It is reportedly possible to reproduce this condition by sending a fragmented flood of spoofed UDP packets to a vulnerable system. This will reportedly consume system resources and may ultimately result in the system locking up until the attack desists.

Microsoft Windows 98 Fragmented UDP Flood Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Windows 98 Fragmented UDP Flood Denial Of Service Vulnerability

References:

• DoS - affecting _both_ ZA and W98 (nologin )
  
• Re: DoS - affecting _both_ ZA and W98 (3APA3A <[email protected]>)