CVE-1999-0534: Medium severity Microsoft Windows NT vulnerability
A Windows NT user has inappropriate rights or privileges, e.g. Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, or Unsolicited Input.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Review the system's User Rights Assignment and remove any of the listed privileges from non-administrative or unnecessary accounts. Use Local Security Policy on standalone systems or Group Policy for domain-managed systems to edit 'User Rights Assignment'. Apply the principle of least privilege and ensure only appropriate privileged accounts/groups retain these rights.
Microsoft Windows 2000 / Microsoft Windows NT User Rights Assignment = Remove the following rights from accounts that do not require them: Act as System, Add Workstation, Backup, Change System Time, Create Pagefile, Create Permanent Object, Create Token Name, Debug, Generate Security Audit, Increase Priority, Increase Quota, Load Driver, Lock Memory, Profile Single Process, Remote Shutdown, Replace Process Token, Restore, System Environment, Take Ownership, Unsolicited Input - Operational
Audit existing user and group assignments to identify accounts granted any of the listed rights; remove or reassign those rights where not required and verify the changes have taken effect. Document the remediation and monitor for recurrence.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0534?
CVE-1999-0534 has a high severity level due to its potential for unauthorized privilege escalation.
How do I fix CVE-1999-0534?
To fix CVE-1999-0534, ensure that user permissions are correctly configured to limit unnecessary privileges.
What systems are affected by CVE-1999-0534?
CVE-1999-0534 affects Microsoft Windows NT and Windows 2000 systems.
What are the consequences of CVE-1999-0534?
If exploited, CVE-1999-0534 can lead to significant security risks, including unauthorized system control and data breaches.
Can CVE-1999-0534 be exploited remotely?
CVE-1999-0534 typically requires local access to exploit, though poor security configurations may increase remote risks.