CVE-2000-1039
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of...
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
Exploit likelihood
What each source reports
NVD Score used
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
- Record
CVE-2000-1039- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
- Record
CVE-2000-1039- Updated
- 2026-11-02
EUVDEUVD-2000-1026 No score
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
- Record
EUVD-2000-1026- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-272q-6m92-rrfr No score
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of...
Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. NOTE: this candidate may change significantly as the security community discusses the technical nature of NAPTHA and learns more about the affected applications. This candidate is at a higher level of abstraction than is typical for CVE.
- Record
GHSA-272q-6m92-rrfr- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2000-1039 is a medium vulnerability (CVSS 5.0) in Microsoft Windows 95, published December 19, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 45.8%, the 98th percentile. No source names a fixed version.
References
cert.org/advisories/CA-2000-21.html
razor.bindview.com/publish/advisories/adv_NAPTHA.html
archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0105.html
securityfocus.com/bid/2022
docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-091
nvd.nist.gov/vuln/detail/CVE-2000-1039
github.com/advisories/GHSA-272q-6m92-rrfr