CVE-1999-0285

Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection

published February 4, 2000

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

⚠️ A simple connection open-and-close could take down your telnet service! It's like someone knocking on your door just to slam it shut—over and over again! Imagine hosting a dinner party, and every time guests arrive, they just peek in and leave without staying to eat. Your kitchen gets frantic, and the food goes cold while you keep answering the door! This type of Denial of Service (DoS) can prevent legitimate users from establishing a connection to the telnet service, potentially disrupting important operations or communications. While it won't lead to data theft, it can cause major inconvenience and outages, making your system feel less like a server and more like a ghost town.

Put simply

Imagine hosting a dinner party, and every time guests arrive, they just peek in and leave without staying to eat. Your kitchen gets frantic, and the food goes cold while you keep answering the door! The vulnerability in question allows an attacker to open a telnet connection and immediately close it, causing excessive overhead on the server and potentially leading to service unavailability.

What to do

This type of Denial of Service (DoS) can prevent legitimate users from establishing a connection to the telnet service, potentially disrupting important operations or communications. While it won't lead to data theft, it can cause major inconvenience and outages, making your system feel less like a server and more like a ghost town. To mitigate this issue, consider disabling telnet if it's not in use or implementing rate limiting for connection requests. Regularly review your network configurations for unnecessary services and apply best practices for securing remote access. You've got this! Implement these steps, and your system will be running smoothly in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06693 · 93.9th percentile
Published
2000-02-04T05:00Z
EPSS history
Timeline
  • 04 FEB 05:00Z
    Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a connection
    cvelistv5