Title

Microsoft Windows Network Policy Server (NPS) Denial of Service Vulnerability (MS16-021) (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in the Microsoft Windows. To exploit this vulnerability, an attacker could send specially crafted username strings to the NPS, which could prevent RADIUS authentication on the NPS. If successfully exploited, this vulnerability would allow an attacker to cause denial of service on a Network Policy Server (NPS).

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-65837

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.