Lucene search
HistoryMar 09, 2002 - 5:00 a.m.
CVE-1999-1359
windows nt
policy enforcement
server name length
user restrictions
ntconfig.pol
cve-1999-1359
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.6%
When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies.
Affected configurations
Node
microsoftwindows_nt
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_nt | microsoft windows nt | eq | * |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
69.6%
Related for CVE-1999-1359