CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
571 | CVE-1999-0589 | Candidate | A system-critical Windows NT registry key has inappropriate permissions. | Proposed (19990803) | ACCEPT(1) Wall | NOOP(1) Baker | RECAST(2) Christey, Northcutt | Northcutt> I think we can define appropriate, take a look at the nt security .pdf | and see if you can"t see a way to phrase specific keys in a way that | defines inappropriate. | Christey> Upon further reflection, this is too high-level for CVE. | Specific registry keys with bad permissions is roughly | equivalent to Unix configuration files that have bad | permissions; those permission problems can be created by | any vendor, not just a specific one. Therefore this | candidate should be RECAST into each separate registry | key that has this problem. | View |
572 | CVE-1999-0590 | Candidate | A system does not present an appropriate legal message or warning to a user who is accessing it. | Proposed (19990728) | ACCEPT(2) Baker, Northcutt | MODIFY(1) Christey | RECAST(1) Shostack | Christey> ADDREF CIAC:J-043 | URL:http://ciac.llnl.gov/ciac/bulletins/j-043.shtml | Also add "banner" to the description to facilitate search. | Baker> Should be in place where ever it is possible | View |
573 | CVE-1999-0591 | Candidate | An event log in Windows NT has inappropriate access permissions. | Proposed (19990803) | ACCEPT(2) Baker, Wall | RECAST(1) Northcutt | Northcutt> splain Lucy, splain | View |
574 | CVE-1999-0592 | Candidate | The Logon box of a Windows NT system displays the name of the last user who logged in. | Proposed (19990728) | MODIFY(1) Frech | NOOP(2) Baker, Christey | REJECT(2) Northcutt, Wall | Wall> Information gathering, not vulnerability | Northcutt> Ah a C2 weenie must have snuck this in, this can be a good thing | not just vulnerability | Frech> XF:nt-display-last-username(1353) | Use it if you will. :-) If not, let us know so I can remove the CAN | reference from our database. | Christey> MSKB:Q114463 | http://support.microsoft.com/support/kb/articles/q114/4/63.asp | View |
575 | CVE-1999-0593 | Candidate | The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in. | Modified (20091029) | ACCEPT(1) Wall | MODIFY(1) Frech | NOOP(1) Baker | REJECT(1) Northcutt | Wall> Still a denial of service. | Northcutt> May well be appropriate | Frech> XF:nt-shutdown-without-logon(1291) | View |
Page 115 of 20943, showing 5 records out of 104715 total, starting on record 571, ending on 575