CVE-1999-0591: Critical severity Microsoft Windows NT vulnerability
An event log in Windows NT has inappropriate access permissions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify the ACLs on the Windows NT event log to remove inappropriate permissions and restrict access to only authorized accounts (e.g., Administrators and SYSTEM). Ensure no untrusted or broad groups have read or write access.
Windows NT event log access_permissions = restrict to appropriate accounts - Operational
Audit current event log permissions across affected systems, apply the ACL changes, verify the permissions were applied successfully, and monitor the event logs for signs of unauthorized access after remediation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0591?
CVE-1999-0591 is classified as a moderate severity vulnerability due to its potential to allow unauthorized access to sensitive event logs.
How do I fix CVE-1999-0591?
To fix CVE-1999-0591, adjust the access permissions of the event log in Windows NT to restrict unauthorized access.
What software is affected by CVE-1999-0591?
CVE-1999-0591 affects Microsoft Windows NT operating systems.
Can CVE-1999-0591 lead to data breaches?
Yes, CVE-1999-0591 could potentially lead to data breaches by allowing unauthorized users to access sensitive log information.
What are the consequences of ignoring CVE-1999-0591?
Ignoring CVE-1999-0591 may result in unauthorized access to event logs, increasing the risk of information disclosure and security breaches.