CVE-1999-1593

ÉLEVÉE 7.6CVE-1999-1593 · Published 15/01/2009 · updated 16/06/2026

En bref

CVE-1999-1593 est une vulnérabilité ÉLEVÉE (CVSS 7.6).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 18.1%, plus élevée que 97.2% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to change the domain controller to point to a malicious server. NOTE: this problem may be limited when Windows 95/98 clients are used, or if the primary domain controller becomes unavailable.

References

archives.neohapsis.com/archives/ntbugtraq/1998-1999/msg00371.html · Broken Link
seclists.org/bugtraq/2001/Jan/0264.html · Mailing List
seclists.org/bugtraq/2001/Jan/0269.html · Mailing List
seclists.org/bugtraq/2001/Jan/0271.html · Mailing List
seclists.org/bugtraq/2001/Jan/0274.html · Mailing List
seclists.org/bugtraq/2001/Jan/0276.html · Mailing List
seclists.org/bugtraq/2001/Jan/0289.html · Mailing List
seclists.org/bugtraq/2001/Jan/0298.html · Mailing List
securityfocus.com/bid/2221 · Third Party Advisory
www2.sans.org/reading_room/whitepapers/win2k/185.php · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free