| ID |
CVE-1999-0621
|
| Summary |
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "A component service related to NETBIOS is running." This Common Vulnerabilities and Exposures (CVE) entry is a configuration issue and not a software flaw. As such, it doesn’t fit in the CVE software flaw list. The Common Vulnerability Scoring System (CVSS) base score for this CVE entry has been set to 0 because this CVE entry has no impact as a software flaw according to CVSS. This does not mean that the configuration issue is not important and there may be security implications relative to computers having this configuration. This component service should not be allowed to communicate over untrusted networks, such as the Internet, because it is an unsecured protocol (e.g., communications not encrypted). The software should be patched and configured properly. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 5.0 |
| Impact: | |
| Exploitability: | |
|
| Access |
| Vector | Complexity | Authentication |
|
|
|
|
| Impact |
| Confidentiality | Integrity | Availability |
|
|
|
|
| oval
via4
|
| accepted | 2008-09-01T04:00:42.048-04:00 | | class | compliance | | contributors | | name | Tiffany Bergeron | | organization | The MITRE Corporation |
| name | Jonathan Baker | | organization | The MITRE Corporation |
| name | Jeff Cheng | | organization | Hewlett-Packard |
| name | Jeff Cheng | | organization | Hewlett-Packard |
| name | Jeff Cheng | | organization | Hewlett-Packard |
| name | Dragos Prisaca | | organization | Secure Elements, Inc. |
| name | Nicholas Hansen | | organization | Hewlett-Packard |
| | definition_extensions | | comment | Microsoft Windows NT is installed | | oval | oval:org.mitre.oval:def:36 |
| | description | ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration (CCE). Notes: the former description is: "A component service related to NETBIOS is running." | | family | windows | | id | oval:org.mitre.oval:def:1024 | | status | accepted | | submitted | 2004-05-18T12:00:00.000-04:00 | | title | NetBIOS Over TCP/IP is enabled | | version | 27 |
|
| refmap
via4
|
|
| Last major update |
01-08-2008 - 04:00 |
| Published |
01-01-1999 - 05:00 |
| Last modified |
01-08-2008 - 04:00 |
