CVE-1999-1127

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-772

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://support.microsoft.com/support/kb/articles/Q195/7/33.aspBroken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/523.phpBroken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017Patch, Vendor Advisory
http://support.microsoft.com/support/kb/articles/Q195/7/33.aspBroken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/523.phpBroken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017Patch, Vendor Advisory

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-11297.5Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identif CVE-1999-11305.0Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read CVE-1999-11325.0Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as (1) a Routing Information CVE-1999-11485.0FTP service in IIS 4.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via many passive (PASV) connec CVE-1999-11565.0BisonWare FTP Server 4.1 and earlier allows remote attackers to cause a denial of service via a malformed PORT command that contains a non-n CVE-1999-11575.0Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, CVE-1999-11637.5Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support CVE-1999-11645.0Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL header CVE-1999-11657.2GNU fingerd 1.37 does not properly drop privileges before accessing user information, which could allow local users to (1) gain root privile CVE-1999-11667.2Linux 2.0.37 does not properly encode the Custom segment limit, which allows local users to gain root privileges by accessing and modifying CVE-1999-11676.4Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pa CVE-1999-11687.2install.iss installation script for Internet Security Scanner (ISS) for Linux, version 5.3, allows local users to change the permissions of