CVE-1999-0715
Windows 2000 and NT - Buffer Overflow in Remote Access Service via Malformed Phonebook Entry
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-1999-0715. PoCs published by David Litchfield.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow in the Microsoft Windows NT RAS Service (RASMAN.EXE) by crafting a malicious rasphone.pbk file. The overflow occurs in the RasGetDialParams function when processing an overly long phone number, allowing arbitrary code execution with LocalSystem privileges.
Description
Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook entry.
Exploits (1)
This exploit demonstrates a buffer overflow in the Microsoft Windows NT RAS Service (RASMAN.EXE) by crafting a malicious rasphone.pbk file. The overflow occurs in the RasGetDialParams function when processing an overly long phone number, allowing arbitrary code execution with LocalSystem privileges.