PT-1999-1566 · Microsoft · Windows Nt

Published 1999-12-31 · Updated 2018-10-12 · CVE-1999-1084

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned.

Description The issue concerns the "AEDebug" registry key, which is installed with insecure permissions. This allows local users to modify the key, potentially specifying a Trojan Horse debugger that would be automatically executed in the event of a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-1999-1084

Affected Products

Windows Nt

References · 7

• 🔥 http://securityfocus.com/bid/1044 · Exploit
• 🔥 https://exploit-db.com/exploits/19798 · Exploit
• http://ciac.org/ciac/bulletins/k-029.shtml · Vendor Advisory
• http://support.microsoft.com/support/kb/articles/q103/8/61.asp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1084 · Security Note
• http://marc.info/?l=ntbugtraq&m=90222453431604&w=2 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-008 · Note