CVE-1999-1127
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC"…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 17.7%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 17.75% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-772
- Affected
- microsoft/windows nt
- Source
- cve@mitre.org
References
- http://support.microsoft.com/support/kb/articles/Q195/7/33.aspBroken Link, Patch, Vendor Advisory
- http://www.iss.net/security_center/static/523.phpBroken Link
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017Patch, Vendor Advisory
- http://support.microsoft.com/support/kb/articles/Q195/7/33.aspBroken Link, Patch, Vendor Advisory
- http://www.iss.net/security_center/static/523.phpBroken Link
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.