CVE List

Id CVE No. Status Description Phase Votes Comments Actions
571  CVE-1999-0589  Candidate  A system-critical Windows NT registry key has inappropriate permissions.  Proposed (19990803)  ACCEPT(1) Wall | NOOP(1) Baker | RECAST(2) Christey, Northcutt  Northcutt> I think we can define appropriate, take a look at the nt security .pdf | and see if you can"t see a way to phrase specific keys in a way that | defines inappropriate. | Christey> Upon further reflection, this is too high-level for CVE. | Specific registry keys with bad permissions is roughly | equivalent to Unix configuration files that have bad | permissions; those permission problems can be created by | any vendor, not just a specific one. Therefore this | candidate should be RECAST into each separate registry | key that has this problem.  View
572  CVE-1999-0590  Candidate  A system does not present an appropriate legal message or warning to a user who is accessing it.  Proposed (19990728)  ACCEPT(2) Baker, Northcutt | MODIFY(1) Christey | RECAST(1) Shostack  Christey> ADDREF CIAC:J-043 | URL:http://ciac.llnl.gov/ciac/bulletins/j-043.shtml | Also add "banner" to the description to facilitate search. | Baker> Should be in place where ever it is possible  View
573  CVE-1999-0591  Candidate  An event log in Windows NT has inappropriate access permissions.  Proposed (19990803)  ACCEPT(2) Baker, Wall | RECAST(1) Northcutt  Northcutt> splain Lucy, splain  View
574  CVE-1999-0592  Candidate  The Logon box of a Windows NT system displays the name of the last user who logged in.  Proposed (19990728)  MODIFY(1) Frech | NOOP(2) Baker, Christey | REJECT(2) Northcutt, Wall  Wall> Information gathering, not vulnerability | Northcutt> Ah a C2 weenie must have snuck this in, this can be a good thing | not just vulnerability | Frech> XF:nt-display-last-username(1353) | Use it if you will. :-) If not, let us know so I can remove the CAN | reference from our database. | Christey> MSKB:Q114463 | http://support.microsoft.com/support/kb/articles/q114/4/63.asp  View
575  CVE-1999-0593  Candidate  The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.  Modified (20091029)  ACCEPT(1) Wall | MODIFY(1) Frech | NOOP(1) Baker | REJECT(1) Northcutt  Wall> Still a denial of service. | Northcutt> May well be appropriate | Frech> XF:nt-shutdown-without-logon(1291)  View

Page 115 of 20943, showing 5 records out of 104715 total, starting on record 571, ending on 575

Actions