CVE-2000-0259
HighExploitation Probability (EPSS)
Elevated risk70th percentile - higher than 70% of all known CVEs
Summary
The default permissions for the Cryptography\Offload registry key in Windows NT 4.0 allow local users to compromise the cryptographic keys of other users.
Risk Assessment
The organization may be at risk of data confidentiality loss as local users can access the cryptographic keys of other users.
Recommendation
It is recommended to change the default permissions for the Cryptography\Offload registry key to restrict access to cryptographic keys.
Other vulnerabilities in Windows NT 4.0
See all- CVE-2000-1200Medium
Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users.
- CVE-2000-1227Medium
Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is sent back.
- CVE-1999-1579Medium
The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine.
- CVE-1999-1127High
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, allowing remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data.
- CVE-1999-1452Low
GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.
- CVE-1999-1132Medium
Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as a Routing Information Field (RIF) field with a hop count greater than 7 or a list containing duplicate Token Ring IDs.
- CVE-1999-0994Medium
Windows NT with SYSKEY reuses the keystream used for encrypting SAM password hashes, allowing an attacker to crack passwords.
- CVE-1999-0987High
Windows NT improperly downloads a system policy if the domain user logs into the domain with a space at the end of the domain name.
- CVE-1999-1234Medium
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in calls to SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo.
- CVE-2000-0328Medium
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), allowing remote attackers to perform spoofing and session hijacking.
Original NVD description (English source)
The default permissions for the Cryptography\Offload registry key used by the OffloadModExpo in Windows NT 4.0 allows local users to obtain compromise the cryptographic keys of other users.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS