PT-2009-1128 · Microsoft · Windows Internet Naming Service

Published 2009-01-15 · Updated 2020-01-10 · CVE-1999-1593

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Internet Naming Service (WINS) (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in connectivity loss, or steal credentials by exploiting a registration vulnerability. This is done by using a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. The problem may be limited under certain conditions, such as when using Windows 95/98 clients or if the primary domain controller becomes unavailable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-1999-1593

Affected Products

Windows Internet Naming Service

References · 11

• 🔥 https://www2.sans.org/reading_room/whitepapers/win2k/185.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1593 · Security Note
• http://seclists.org/bugtraq/2001/Jan/0274.html · Note
• http://securityfocus.com/bid/2221 · Note
• http://seclists.org/bugtraq/2001/Jan/0264.html · Note
• http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00371.html · Note
• http://seclists.org/bugtraq/2001/Jan/0276.html · Note
• http://seclists.org/bugtraq/2001/Jan/0271.html · Note
• http://seclists.org/bugtraq/2001/Jan/0269.html · Note
• http://seclists.org/bugtraq/2001/Jan/0289.html · Note
• http://seclists.org/bugtraq/2001/Jan/0298.html · Note