Network Policy Server RADIUS Implementation Denial of Service Vulnerability

CVE-2016-0050 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service (RADIUS authentication outage) via crafted requests, aka "Network Policy Server RADIUS Implementation Denial of Service Vulnerability."

Learn more about our Cis Benchmark Audit For Microsoft Windows Server.