CVE-1999-0534
MediumExploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
A Windows NT user has inappropriate rights or privileges, which may include acting as System, adding workstations, or changing system time.
Risk Assessment
Inappropriate privileges can lead to privilege escalation, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to review and restrict user privileges to ensure they only have the permissions necessary to perform their tasks.
Other vulnerabilities in Windows NT
See all- CVE-2000-1227Medium
Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is sent back.
- CVE-1999-1579Medium
The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine.
- CVE-1999-1452Low
GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.
- CVE-1999-1127High
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, allowing remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data.
- CVE-1999-1132Medium
Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as a Routing Information Field (RIF) field with a hop count greater than 7 or a list containing duplicate Token Ring IDs.
- CVE-1999-0994Medium
Windows NT with SYSKEY reuses the keystream used for encrypting SAM password hashes, allowing an attacker to crack passwords.
- CVE-1999-0987High
Windows NT improperly downloads a system policy if the domain user logs into the domain with a space at the end of the domain name.
- CVE-1999-1234Medium
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in calls to SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo.
- CVE-2000-0328Medium
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), allowing remote attackers to perform spoofing and session hijacking.
- CVE-1999-0728High
A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.
Original NVD description (English source)
A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS