CVE-1999-1127

Name: CVE-1999-1127
Creator: NVD / NIST
Published: 1999-12-31T05:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 7.5/10EPSS 15.08%

Last modified Jun 16, 2026

CVE-1999-1127 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.. EPSS estimates a 15.08% chance of exploitation in the next 30 days.

Description

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability.

Metrics

CVSS 3.1

7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability

15.08%

96.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-772

Affected Software

Vendor	Product	Versions
Microsoft	Windows Nt	4.0

References

http://support.microsoft.com/support/kb/articles/Q195/7/33.aspBroken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/523.phpBroken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017Patch, Vendor Advisory
http://support.microsoft.com/support/kb/articles/Q195/7/33.aspBroken Link, Patch, Vendor Advisory
http://www.iss.net/security_center/static/523.phpBroken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-017Patch, Vendor Advisory

Timeline

Published: Dec 31, 1999
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-1999-1127?

How severe is CVE-1999-1127?

CVE-1999-1127 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 15.08% probability of exploitation in the next 30 days.

How do I fix CVE-1999-1127?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-1999-1127?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST