CVE-1999-1593: High severity microsoft windows 2000 vulnerability
Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1593?
CVE-1999-1593 is considered a high severity vulnerability due to its potential to cause denial of service and credential theft.
How do I fix CVE-1999-1593?
To mitigate CVE-1999-1593, ensure that your WINS service is properly configured to prevent unauthorized registration and use secure methods for network communications.
What systems are affected by CVE-1999-1593?
CVE-1999-1593 affects Microsoft Windows 2000, Windows 95, and Windows 98 operating systems.
What type of attack is associated with CVE-1999-1593?
CVE-1999-1593 is associated with a denial of service attack that exploits the WINS service to redirect domain controller queries.
Can CVE-1999-1593 be exploited remotely?
Yes, CVE-1999-1593 can be exploited remotely by attackers who manipulate the WINS service to point to a malicious server.