CVE-2000-1039
mediumpriority · track · 36EPSS 0.458 · 99 %ileEURUUSEPSS · scored 2026-10-27
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (7)
Products and version ranges known to be affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0105.htmlenisa_euvd
- http://razor.bindview.com/publish/advisories/adv_NAPTHA.htmlenisa_euvd
- http://www.cert.org/advisories/CA-2000-21.htmlenisa_euvd
- http://www.securityfocus.com/bid/2022enisa_euvd
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-091enisa_euvd
- http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0105.htmlnvd
- http://razor.bindview.com/publish/advisories/adv_NAPTHA.htmlnvd
- http://www.cert.org/advisories/CA-2000-21.htmlPatchThird Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan