PT-2009-1128 · Microsoft · Windows Internet Naming Service

Publicado 2009-01-15 · Atualizado 2020-01-10 · CVE-1999-1593

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Internet Naming Service (WINS) (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in connectivity loss, or steal credentials by exploiting a registration vulnerability. This is done by using a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. The problem may be limited under certain conditions, such as when using Windows 95/98 clients or if the primary domain controller becomes unavailable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-1999-1593

Produtos afetados

Windows Internet Naming Service

Referências · 11

• 🔥 https://www2.sans.org/reading_room/whitepapers/win2k/185.php · Exploit
• http://seclists.org/bugtraq/2001/Jan/0274.html · Nota
• http://securityfocus.com/bid/2221 · Nota
• http://seclists.org/bugtraq/2001/Jan/0264.html · Nota
• http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00371.html · Nota
• http://seclists.org/bugtraq/2001/Jan/0276.html · Nota
• http://seclists.org/bugtraq/2001/Jan/0271.html · Nota
• http://seclists.org/bugtraq/2001/Jan/0269.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1593 · Nota de Segurança
• http://seclists.org/bugtraq/2001/Jan/0289.html · Nota
• http://seclists.org/bugtraq/2001/Jan/0298.html · Nota