PT-1999-1445 · Microsoft · Windows Nt 4.0

Published 1999-11-04 · Updated 2018-10-12 · CVE-1999-0899

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows NT 4.0

Description The issue allows a local user to execute arbitrary commands due to inappropriate permissions in the print spooler, enabling the user to specify an alternate print provider.

Recommendations For Windows NT 4.0, consider restricting access to the print spooler service to minimize the risk of exploitation. As a temporary workaround, limit the ability of local users to specify alternate print providers until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-264

Related Identifiers

CVE-1999-0899

Affected Products

Windows Nt 4.0

References · 5

• 🔥 https://exploit-db.com/exploits/19594 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-0899 · Security Note
• http://securityfocus.com/bid/769 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-047 · Note
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ243649 · Note