Microsoft Windows NT 4.0 Passfilt.dll privileges management

Summaryinfo

A vulnerability identified as critical has been detected in Microsoft Windows NT 4.0. Impacted is an unknown function in the library Passfilt.dll. The manipulation leads to privileges management. There is no available exploit. You should change the configuration settings.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Microsoft Windows NT 4.0 (Operating System). This issue affects some unknown functionality in the library Passfilt.dll. The manipulation with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability.

The weakness was presented 10/08/1998. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

It is possible to mitigate the problem by applying the configuration setting .

The vulnerability is also documented in the databases at X-Force (1310) and Vulnerability Center (SBV-2394†). See VDB-88644 and VDB-88639 for similar entries. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

Version

• NT 4.0

License

• commercial

Website

• Vendor: https://www.microsoft.com/
• Product: https://www.microsoft.com/en-us/windows

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion