PT-1999-1445 · Microsoft · Windows Nt 4.0

Publicado 1999-11-04 · Atualizado 2018-10-12 · CVE-1999-0899

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows NT 4.0

Description The issue allows a local user to execute arbitrary commands due to inappropriate permissions in the print spooler, enabling the user to specify an alternate print provider.

Recommendations For Windows NT 4.0, consider restricting access to the print spooler service to minimize the risk of exploitation. As a temporary workaround, limit the ability of local users to specify alternate print providers until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-1999-0899

Produtos afetados

Windows Nt 4.0

Referências · 5

• 🔥 https://exploit-db.com/exploits/19594 · Exploit
• http://securityfocus.com/bid/769 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-0899 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047 · Nota
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649 · Nota