PT-1997-1143 · Microsoft · Windows Nt

Published 1997-01-01 · Updated 2022-08-17 · CVE-1999-0504

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows NT (affected versions not specified)

Description The issue concerns Windows NT local user or administrator accounts that have default, null, blank, or missing passwords.

Recommendations For all affected versions, ensure that all local user and administrator accounts have strong, non-default passwords set to prevent unauthorized access.

Exploit

Fix

Related Identifiers

CVE-1999-0504

Affected Products

Windows Nt

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/powershell_remoting.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/current_user_psexec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/psexec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/wmi.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smb/psexec_loggedin_users.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16374 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0504 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0504 · Note