CVE-1999-1593
First published: Thu Jan 15 2009(Updated: )
Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 2000 | ||
| Microsoft Windows 95 | ||
| Microsoft Windows 98 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/bugtraq/2001/Jan/0271.html
- http://seclists.org/bugtraq/2001/Jan/0264.html
- http://seclists.org/bugtraq/2001/Jan/0289.html
- https://www2.sans.org/reading_room/whitepapers/win2k/185.php
- http://seclists.org/bugtraq/2001/Jan/0274.html
- http://seclists.org/bugtraq/2001/Jan/0269.html
- http://www.securityfocus.com/bid/2221
- http://seclists.org/bugtraq/2001/Jan/0298.html
- http://archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00371.html
- http://seclists.org/bugtraq/2001/Jan/0276.html
Frequently Asked Questions
What is the severity of CVE-1999-1593?
CVE-1999-1593 is considered a high severity vulnerability due to its potential to cause denial of service and credential theft.
How do I fix CVE-1999-1593?
To mitigate CVE-1999-1593, ensure that your WINS service is properly configured to prevent unauthorized registration and use secure methods for network communications.
What systems are affected by CVE-1999-1593?
CVE-1999-1593 affects Microsoft Windows 2000, Windows 95, and Windows 98 operating systems.
What type of attack is associated with CVE-1999-1593?
CVE-1999-1593 is associated with a denial of service attack that exploits the WINS service to redirect domain controller queries.
Can CVE-1999-1593 be exploited remotely?
Yes, CVE-1999-1593 can be exploited remotely by attackers who manipulate the WINS service to point to a malicious server.
- collector/nvd-historical
- vendor/microsoft
- vendor/windows 2000
- vendor/windows 95
- vendor/windows 98
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- agent/weakness
- agent/author
- agent/severity
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- canonical/microsoft windows 2000
- canonical/microsoft windows 95
- canonical/microsoft windows 98