CVE-1999-0995

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Dec 16, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-09967.5Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.CVE-1999-09977.5wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to th CVE-1999-09985.0Cisco Cache Engine allows an attacker to replace content in the cache.CVE-1999-09994.3Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.CVE-1999-10005.0The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.CVE-1999-10012.6Cisco Cache Engine allows a remote attacker to gain access via a null username and password.CVE-1999-10025.0Netscape Navigator uses weak encryption for storing a user's Netscape mail password.CVE-1999-10035.0War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.CVE-1999-10045.0Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.CVE-1999-10055.0Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP CVE-1999-10065.0Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.CVE-1999-10077.6Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.