CVE-1999-0899: High severity Microsoft Windows NT vulnerability
The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Change the permissions on the Windows NT print spooler so that only administrative accounts can specify an alternate print provider. Remove or revoke the ability for non‑administrative local users to set an alternate print provider to prevent arbitrary command execution.
Windows NT print spooler permission to specify alternate print provider = administrators only
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0899?
CVE-1999-0899 is considered critical due to its potential for arbitrary code execution.
How do I fix CVE-1999-0899?
To fix CVE-1999-0899, you should apply the latest security patches from Microsoft for Windows NT 4.0.
What versions of Windows NT are affected by CVE-1999-0899?
CVE-1999-0899 affects all variants of Windows NT 4.0, including all service packs.
Can CVE-1999-0899 be exploited remotely?
CVE-1999-0899 is a local vulnerability, meaning it requires local user access to exploit.
What does CVE-1999-0899 allow an attacker to do?
CVE-1999-0899 allows an attacker to execute arbitrary commands by exploiting inappropriate permissions in the print spooler.