PT-1997-1143 · Microsoft · Windows Nt

🗓️ 01 Jan 1997 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Windows local accounts may have default, null, blank, or missing passwords; ensure strong, non-default passwords.

Reporter	Title	Published	Views	Family All 23
0day.today	Psexec Via Current User Token	3 Aug 201200:00	–	zdt
0day.today	Microsoft Windows Authenticated Powershell Command Execution	13 Jul 201300:00	–	zdt
0day.today	Windows Management Instrumentation (WMI) Remote Command Execution	23 Oct 201300:00	–	zdt
Circl	CVE-1999-0504	2 Dec 201000:00	–	circl
CVE	CVE-1999-0504	4 Feb 200005:00	–	cve
Cvelist	CVE-1999-0504	4 Feb 200005:00	–	cvelist
Exploit DB	Microsoft Windows - (Authenticated) User Code Execution (Metasploit)	2 Dec 201000:00	–	exploitdb
Metasploit	Microsoft Windows Authenticated Logged In Users Enumeration	4 Dec 201223:32	–	metasploit
Metasploit	PsExec via Current User Token	7 Mar 201323:53	–	metasploit
Metasploit	Powershell Remoting Remote Command Execution	4 Dec 201422:06	–	metasploit

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smb/psexec_loggedin_users.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/psexec.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/wmi.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/powershell_remoting.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/current_user_psexec.rb
exploit-db	www.exploit-db.com/exploits/16374
nvd	www.nvd.nist.gov/vuln/detail/CVE-1999-0504
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0504

17 Aug 2022 00:00Current

6Medium risk

Vulners AI Score6

CVSS 27.5

EPSS0.39474

local accounts default passwords null passwords blank passwords missing passwords