CVE-1999-1234

Medium

Published: 26/10/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

13.45%

96th percentile - higher than 96% of all known CVEs

Summary

LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in calls to SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo.

Risk Assessment

Attackers can exploit this vulnerability to disrupt access to system services, potentially leading to downtime for the organization.

Recommendation

It is recommended to upgrade the system to a newer version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to (1) SamrOpenDomain, (2) SamrEnumDomainUsers, and (3) SamrQueryDomainInfo.