Microsoft NPS RADIUS Server Denial of Service Vulnerabilty
Last Update Date:
11 Feb 2016 12:26
Release Date:
11 Feb 2016
4024
Views
RISK: High Risk
TYPE: Operating Systems - Windows OS
A denial of service vulnerability exists when a Network Policy Server (NPS) improperly handles a Remote Authentication Dial-In User Service (RADIUS) authentication request. An unauthenticated attacker who successfully exploited this vulnerability could send specially crafted username strings to a Network Policy Server (NPS) causing a denial of service condition for RADIUS authentication on the NPS.
Impact
- Denial of Service
System / Technologies affected
- Microsoft Windows Server 2008
- Microsoft Windows Server 2008 R2
- Microsoft Windows Server 2012 and Windows Server 2012 R2
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
https://technet.microsoft.com/en-us/library/security/MS16-021
Vulnerability Identifier
Source
Related Link
Share with