PT-2000-1037 · Microsoft · Windows Nt Server 4.0+2

Published 2000-12-14 · Updated 2018-08-13 · CVE-1999-1579

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Windows NT Server 4.0 versions prior to SP6 Windows NT 4.0 Terminal Server Edition versions prior to SP6

Description The issue allows remote attackers to cause a denial of service by consuming system resources through the creation of a large number of arbitrary files on the target machine. This is due to a problem with the Cenroll ActiveX control (xenroll.dll).

Recommendations For Windows NT Server 4.0 versions prior to SP6, apply Service Pack 6 to resolve the issue. For Windows NT 4.0 Terminal Server Edition versions prior to SP6, apply Service Pack 6 to resolve the issue.

Fix

Related Identifiers

CVE-1999-1579

Affected Products

Cenroll Activex Control

Windows Nt 4.0 Terminal Server Edition

Windows Nt Server 4.0

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-1999-1579 · Security Note
• http://kb.cert.org/vuls/id/3062 · Note
• http://securityfocus.com/bid/6827 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7107 · Note
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B242366 · Note