RESOLUTION
Microsoft has updated Tcpip.sys to correct the problem. Instructions for
installing it are available from Microsoft support channels, or directly
from the Internet locations below.
NOTE: This hotfix was originally posted on May 12, 1997. A subsequent fix
was completed on January 9, 1998, to address another nearly identical
attack and this hotfix has replaced the original one. The original hotfix
is included in Windows NT 4.0 Service Pack 3. The most recent hotfix is
not; however, it is available from the following Internet locations:
Windows NT 4.0 SP2
NOTE: Service pack 2 must be applied to Windows NT 4.0 prior to applying
this fix.
This hotfix has been posted to the following Internet location:
Windows NT 4.0 SP3
NOTE: Service pack 3 must be applied to Windows NT 4.0 prior to applying
this fix.
Oob-fix and Icmp-fix have been superseded by Teardrop2-fix. For your
convenience, the English version of this post-SP3 hotfix has been posted to
the following Internet location. However, Microsoft recommends that you
install Windows NT 4.0 Service Pack 4 to correct this problem.
This fix should have the following time stamp:
01/09/98 08:16a 143,664 Tcpip.sys (Intel)
01/09/98 08:13a 263,536 Tcpip.sys (Alpha)
For your convenience, the English version of this post-SP3 hotfix has been
posted to the following Internet location. However, Microsoft recommends
that you install Windows NT 4.0 Service Pack 4 to correct this problem.
WARNING: If you install the original (archived) version of this hotfix
AFTER you apply the later version, your system may become unusable.
Microsoft does not recommend you install the original hotfix after applying
the later version.
To resolve this problem, obtain the latest service pack for Windows NT 4.0 or Windows NT Server 4.0, Terminal Server Edition. For additional information, click the following article number to view the article in the
Microsoft Knowledge Base:
152734 How to Obtain the Latest Windows NT 4.0 Service Pack
Windows NT 3.51
NOTE: Service pack 5 must be applied to Windows NT 3.51 prior to applying
this fix.
This hotfix has been posted to the following Internet location:
This fix should have the following time stamp:
01/14/98 12:04p 123,824 Tcpip.sys (Intel)
01/14/98 12:00p 216,848 Tcpip.sys (Alpha)