Microsoft Network Policy Server RADIUS Denial of Service (MS15-007; CVE-2015-0015)

A denial of service vulnerability exists in the Network Policy Server NPS. The vulnerability is due to the way the NPS handles username strings. A remote attacker can exploit this issue by sending a specially crafted username string to the NPS...

CVE-2015-0015: Undefined Security Weakness

Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of service system hang and RADIUS outage via crafted username strings to 1 Internet Authentication Service IAS or 2 Network Policy Server NPS, aka "Network Policy...

PT-2015-4395

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server versions 2003 SP2, 2008 SP2 and R2 SP1, and 2012 Gold and R2 Description This issue allows remote attackers to cause a denial of service condition, resulting in a system hang and RADIUS outage, by sending crafted...

MS15-007: Vulnerability in Network Policy Server RADIUS implementation could cause denial of service: January 13, 2015

None None...