CVE-1999-1127
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, allowing remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data.
Risk Assessment
Attackers can exploit this vulnerability to overload the system, leading to unavailability for users.
Recommendation
It is recommended to upgrade the system to a newer version that fixes this vulnerability and to monitor RPC connections for suspicious activity.
Original NVD description (English source)
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.