CVE-1999-0715: Buffer Overflow
Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Remote Access Service (RAS) clientfrom your environment.Uninstall or remove the RAS client from affected systems (Microsoft Windows 2000 and Microsoft Windows NT) if it is not required.
- Configuration
Disable the RAS client on affected systems (Microsoft Windows 2000 and Microsoft Windows NT) if remote access functionality is not required.
Remote Access Service (RAS) client enabled = false - Compensating control
Block or restrict RAS access at the network perimeter (firewall/ACL) and prevent untrusted incoming RAS connections; restrict management access to trusted IPs to mitigate exploitation via malformed phonebook entries.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0715?
CVE-1999-0715 has a moderate severity rating due to its potential to cause denial of service and remote command execution.
How do I fix CVE-1999-0715?
To fix CVE-1999-0715, you should apply the appropriate security patches provided by Microsoft for your affected Windows NT or Windows 2000 systems.
What versions are affected by CVE-1999-0715?
CVE-1999-0715 affects Microsoft Windows NT 4.0 and Microsoft Windows 2000.
Can CVE-1999-0715 be exploited remotely?
Yes, CVE-1999-0715 can be exploited remotely through a malformed phonebook entry.
What impact does CVE-1999-0715 have on my system?
CVE-1999-0715 can lead to unauthorized command execution or cause the system to become unresponsive, resulting in a denial of service.