PT-1999-1585 · Microsoft · Windows Nt

CVE-1999-1127 · Publicado 1999-12-31 · Atualizado 2024-02-08

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows NT version 4.0

Description The issue allows remote attackers to cause a denial of service, specifically resource exhaustion, by establishing a series of connections with malformed data. This is related to the improper shutdown of invalid named pipe RPC connections.

Recommendations For Windows NT version 4.0, consider restricting access to named pipe RPC connections to minimize the risk of exploitation. As a temporary workaround, limiting the number of concurrent connections may help mitigate the issue until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-1999-1127

Produtos afetados

Windows Nt

Referências · 5

• https://t.me/cvenotify/70650 · Publicação no Telegram
• http://support.microsoft.com/support/kb/articles/Q195/7/33.asp · Aviso do Fabricante
• http://iss.net/security_center/static/523.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1127 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017 · Aviso do Fabricante