CVE-1999-0987

Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name

published January 4, 2000

CVSS
—
EPSS
5%
Percentile
92.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky space at the end of a domain name could prevent Windows NT from properly loading system policies! Think of it like an incomplete address on a package; the delivery service might just toss it back instead of delivering it to your doorstep. A misplaced space could leave your system policies hanging at the post office instead of reaching your system! This could lead to some pretty confusing situations where users are left with outdated or incomplete system policies, potentially hindering their ability to function properly within the network. While the risk of blatant exploitation is low, the operational hiccups could be a hassle when trying to access shared resources or security updates.

Put simply

Think of it like an incomplete address on a package; the delivery service might just toss it back instead of delivering it to your doorstep. A misplaced space could leave your system policies hanging at the post office instead of reaching your system! This vulnerability occurs when Windows NT fails to download the correct system policy due to trailing spaces in the domain name during user logins, leading to possible misconfigurations or access issues.

What to do

This could lead to some pretty confusing situations where users are left with outdated or incomplete system policies, potentially hindering their ability to function properly within the network. While the risk of blatant exploitation is low, the operational hiccups could be a hassle when trying to access shared resources or security updates. To remediate this, ensure that domain names entered during login are free of trailing spaces. Regularly audit user accounts and update any configurations that could lead to this issue. You can absolutely tackle this! With a little attention to detail, you’ll keep your environment running smoothly! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04906 · 92.1th percentile
Published
2000-01-04T05:00Z
EPSS history
Timeline
  • 04 JAN 05:00Z
    Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain name
    cvelistv5