Advertisement
Promo

Become a member of the ZDNet UK community

Resources Downloads

Download Now

Windows Me Malformed IPX NMPI Packet Vulnerability Patch


License Free
Requirements None
Downloads 225 Limitations None
Publisher Microsoft File Size 216k
Date added 13 Oct 2000 Check your speed

This patch eliminates a security vulnerability that could cause an affected system to fail, and depending on the number of affected machines on a network, potentially could be used to flood the network with superfluous data. The affected system component is normally present only if it has been deliberately installed.

The Microsoft IPX/SPX protocol implementation (NWLink) includes an NMPI (Name Management Protocol on IPX) listener that will reply to any requesting network address. The NMPI listener software does not filter the requesting computer's network address correctly, and will therefore reply to a network broadcast address. Such a reply would in turn cause other IPX NMPI listener programs to also reply. This sequence of broadcast replies could generate a large amount of unnecessary network traffic. A machine that crashed due to this vulnerability could be put back into service by rebooting.

IPX is not installed by default in Windows 98, 98 Second Edition, or Windows Me, and is only installed by default in Windows 95 if there is a network card present in the machine at installation time. Even when IPX is installed, a malicious user's ability to exploit this vulnerability would depend on whether they could deliver a malformed NMPI packet to an affected machine. Routers frequently are configured to drop IPX packets, and if such a router lay between the malicious user and an affected machine, they could not attack it. Routers on the Internet, as a rule, do not forward IPX packets, and this would tend to protect intranets from outside attack, as well as protecting machines connected to the Internet via dial-up connections. As discussed in the FAQ, the most likely scenario in which this vulnerability could be exploited would be one in which a malicious user on an intranet would attack affected machines on the same intranet, or one in which a malicious user on the Internet attacked affected machines on their cable modem or DSL subnet. Read the ""Malformed IPX NMPI Packet"" Vulnerability FAQ.

Download Now

Did you find this download useful?
20 out of 34 users found this download useful


People who downloaded this software also downloaded...

GoGoData Toolbar 3.0.1

Block most Web advertising, remove and defend against malware, autofill Web logins and clean browsing history.

More info +


sQusi Tracking Plus 2.0.1.7

Stop cookies, scripts, and files from being planted on your computer.

More info +


Pop Up Blocker Pro 7.0.6a

Block spam and pop-ups and erase files generated by Web surfing.

More info +


Pop Up Blocker Pro Rich Media Ads Edition 5.0.1

Block annoying Internet ads, such as videos, background sounds, Java applets, and Flash movies.

More info +


SysLogIDM2Connector 1.0

Provide interoperability between application, device, event management console, and Novell eDirectory.

More info +


Ultra Ad Killer 1.31

Block various kinds of pop-ups and erase the tracks of your Internet activities.

More info +


Locus Screen 2006 Professional 2.1

Monitor and block unauthorized process execution and modification of files.

More info +


abylon LOGON 7.3

Lock and log out your computer when you pull your smart card or USB stick.

More info +


Dynaxa Anti-Spam (Vista compatible version) 4.2

Identify and eliminate spam and phising.

More info +


Stop-the-Pop-Up Lite 2.56

Block pop-up and pop-under ads as you surf the Web.

More info +


Broadband Deals? Powered by Top 10 Broadband

150+ broadband packages

Compare 30+ mobile broadband deals

Mobile Broadband »

Download

Trend Micro Worry-Free Business Security Advanced

Trend Micro™ Worry-Free™ Business Security Advanced and Standard 6. #1 for Small Business Security

  • Downloads: 1,119
  • Requirements: Processor: Intel™ Pentium™ or AMD™. RAM: 256MB-1GB (operating system dependant). Disk space: 350MB. Web Browser: Microsoft™ Internet Explorer 6.0 or 7.0.
  • License:
  • Publisher:
  • Size: 0

Download Now

Google Chrome Special Report

All roads lead to Chrome

All roads lead to Chrome

Comment With its new browser, Google has finally taken its gaudy, chrome-plated, futuristic ray gun and pointed it straight at Microsoft's head

More Special Reports


Skip Sub Navigation Links to CNET Brand Links

Help

Become part of the ZDNet community.

Newsletters