CVE-1999-0579

A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys

published February 4, 2000

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky oversight in Windows NT means non-critical registry keys aren't logged at all, leaving you in the dark! Think of it like a restaurant kitchen where the chef only writes down the orders for the fancy dishes, completely ignoring the simple sides. If something goes awry with those side dishes, nobody knows what happened! This could allow unauthorized changes to critical settings without anyone noticing. Imagine a hidden hand changing recipes unnoticed until the food doesn't taste right or worse—until someone gets food poisoning!

Put simply

Think of it like a restaurant kitchen where the chef only writes down the orders for the fancy dishes, completely ignoring the simple sides. If something goes awry with those side dishes, nobody knows what happened! The Windows NT registry audit policy fails to log success or failure events for non-critical registry keys, meaning unauthorized changes can slip through without detection.

What to do

This could allow unauthorized changes to critical settings without anyone noticing. Imagine a hidden hand changing recipes unnoticed until the food doesn't taste right or worse—until someone gets food poisoning! To mitigate this risk, check your registry audit policies and ensure logging is enabled for all keys, not just the critical ones. Regularly review your logs to spot any suspicious activity—even in the non-critical areas. You've got this! With a few tweaks, you'll be keeping an eye on every part of your kitchen! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06249 · 93.5th percentile
Published
2000-02-04T05:00Z
EPSS history
Timeline
  • 04 FEB 05:00Z
    A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys
    cvelistv5