CVE-1999-0593

MediumCVSS 4.9/10Last modified Jun 16, 2026

Description

The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging in.

Metrics

CVSS 2.0 4.9/10AV:L/AC:L/Au:N/C:N/I:N/A:C

Affected software

No affected versions have been published.

Timeline

Published: Jan 1, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-059410.0A Windows NT system does not restrict access to removable media drives such as a floppy disk drive or CDROM drive.CVE-1999-05952.1A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded.CVE-1999-059610.0A Windows NT log file has an inappropriate maximum size or retention period.CVE-1999-059710.0A Windows NT account policy does not forcibly disconnect remote users from the server when their logon hours expire.CVE-1999-059810.0A network intrusion detection system (IDS) does not properly handle packets that are sent out of order, allowing an attacker to escape detec CVE-1999-059910.0A network intrusion detection system (IDS) does not properly handle packets with improper sequence numbers.CVE-1999-060010.0A network intrusion detection system (IDS) does not verify the checksum on a packet.CVE-1999-060110.0A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.CVE-1999-060210.0A network intrusion detection system (IDS) does not properly reassemble fragmented packets.CVE-1999-060310.0In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users CVE-1999-06045.0An incorrect configuration of the WebStore 1.0 shopping cart CGI program "web_store.cgi" could disclose private information.CVE-1999-06055.0An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.