CVE-2000-0168

Description

Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.

Affected products

• Microsoft / windows_95
• Microsoft / windows_98
• Microsoft / windows_98se

Exploits & proofs of concept

• exploit-dbMicrosoft Windows Server 2000/95/98/ME/NT 3.5.x/Enterprise Server 4.0/Terminal Server 4.0/Workstation 4.0 Microsoft DoS Device Name - Denial of Serviceby anonymous

References

• MISChttp://www.securityfocus.com/templates/advisory.html?id=2126
• MISChttp://www.securityfocus.com/bid/1043
• MISChttp://www.securityfocus.com/templates/archive.pike?list=1&msg=NCBBKFKDOLAGKIAPMILPCENECCAA.labs%40ussrback.com