High severity · published Dec 31, 1999
CVE-1999-1127
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of…
7.5
CVSS
17.7%
EPSS
No
On KEV
Description
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)17.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WN
Windows NT · Microsoft
4.0; 4.0; 4.0; 4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1127
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1127
Broken Link
http://support.microsoft.com/support/kb/articles/Q195/7/33.asp
Broken Link
http://www.iss.net/security_center/static/523.php
Patch
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017
More from Windows NT
7.8
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability
7.8
CVE-2002-0367
Microsoft Windows Privilege Escalation Vulnerability
9.8
CVE-2002-0391
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to…
9.8
CVE-2000-1218
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS…
9.1
CVE-1999-0511
IP forwarding is enabled on a machine which is not a router or firewall