CVE-2015-0015: High severity microsoft windows server vulnerability
Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (system hang and RADIUS outage) via crafted username strings to (1) Internet Authentication Service (IAS) or (2) Network Policy Server (NPS), aka "Network Policy Server RADIUS Implementation Denial of Service Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0015?
CVE-2015-0015 is classified as a denial of service vulnerability, which can cause system hangs and RADIUS outages.
How do I fix CVE-2015-0015?
To mitigate CVE-2015-0015, it is recommended to apply the latest security updates and patches provided by Microsoft for the affected Windows Server versions.
What systems are affected by CVE-2015-0015?
CVE-2015-0015 affects Microsoft Windows Server 2003 SP2, 2008 SP2 and R2 SP1, and 2012 Gold and R2.
What type of attack does CVE-2015-0015 facilitate?
CVE-2015-0015 allows remote attackers to exploit crafted username strings to cause a denial of service.
Are there any known exploits for CVE-2015-0015?
Yes, there are known exploits that specifically target CVE-2015-0015 to induce denial of service conditions.