Vulnerabilities > CVE-1999-0504 - Unspecified vulnerability in Microsoft Windows 2000 and Windows NT

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
microsoft
nessus
exploit available
metasploit

Summary

A Windows NT local user or administrator account has a default, null, blank, or missing password.

Vulnerable Configurations

Part Description Count
OS
Microsoft
2

Exploit-Db

descriptionMicrosoft Windows Authenticated User Code Execution. CVE-1999-0504. Remote exploit for windows platform
idEDB-ID:16374
last seen2016-02-01
modified2010-12-02
published2010-12-02
reportermetasploit
sourcehttps://www.exploit-db.com/download/16374/
titleMicrosoft Windows Authenticated User Code Execution

Metasploit

Nessus

  • NASL familyWindows
    NASL idSMB_BLANK_ADMIN_PASSWORD.NASL
    descriptionThe remote host is running one of the Microsoft Windows operating systems. It was possible to log into it using the administrator account with a blank password.
    last seen2020-06-01
    modified2020-06-02
    plugin id26918
    published2007-10-04
    reporterThis script is Copyright (C) 2007-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/26918
    titleMicrosoft Windows SMB Blank Administrator Password
  • NASL familyWindows
    NASL idSMB_LOGIN_AS_USERS.NASL
    descriptionThis script attempts to log into the remote host using several login / password combinations.
    last seen2020-04-30
    modified2000-05-10
    plugin id10404
    published2000-05-10
    reporterThis script is Copyright (C) 2000-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/10404
    titleMicrosoft Windows SMB Guessable User Credentials

Packetstorm