CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.

• CWE-772

• http://support.microsoft.com/support/kb/articles/Q195/7/33.aspBroken Link, Patch, Vendor Advisory
• http://www.iss.net/security_center/static/523.phpBroken Link
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017Patch, Vendor Advisory
• http://support.microsoft.com/support/kb/articles/Q195/7/33.aspBroken Link, Patch, Vendor Advisory
• http://www.iss.net/security_center/static/523.phpBroken Link
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017Patch, Vendor Advisory

Published

Dec 31, 1999

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-1999-1110Windows Media Player ActiveX object as used in Internet Expl…
• CVE-1999-1111Vulnerability in StackGuard before 1.21 allows remote attack…
• CVE-1999-1112Buffer overflow in IrfanView32 3.07 and earlier allows attac…
• CVE-1999-1117lquerypv in AIX 4.1 and 4.2 allows local users to read arbit…
• CVE-1999-1124HTTP Client application in ColdFusion allows remote attacker…
• CVE-1999-1126Cisco Resource Manager (CRM) 1.1 and earlier creates certain…
• CVE-1999-1129Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote…
• CVE-1999-1130Default configuration of the search engine in Netscape Enter…
• CVE-1999-1132Windows NT 4.0 allows remote attackers to cause a denial of …
• CVE-1999-1148FTP service in IIS 4.0 and earlier allows remote attackers t…
• CVE-1999-1156BisonWare FTP Server 4.1 and earlier allows remote attackers…
• CVE-1999-1157Tcpip.sys in Windows NT 4.0 before SP4 allows remote attacke…