Security readout for executives and security teams
Plain-English summary
This entry describes a configuration condition rather than a software flaw: a one-way or two-way trust relationship exists between Windows NT domains. Trusts let users in one domain access resources in another. If a trust is unnecessary or overly broad, a compromise on one side can spread to the other. Business risk depends on which domains are trusted and what they hold.
Executive priority
Low priority as a standalone item. Treat as part of routine identity hygiene: know which domains trust yours, remove trusts you do not need, and retire legacy NT infrastructure. Elevate priority only if unmanaged or legacy trusts are discovered during review.
Technical view
CVE-1999-0583 records the presence of a one-way or two-way NT domain trust as a security-relevant configuration state. No specific product version, CWE, or CVSS score is assigned. There is no patch because this is an intentional feature. Risk arises when trusts extend authentication and authorization scope beyond what is required, enabling lateral movement, credential reuse, and cross-domain privilege abuse if either domain is compromised.
Likely exposure
Applies only to environments still running legacy Windows NT domain trusts. Modern Active Directory forests supersede this model, but the underlying principle (trust relationships expanding blast radius) still applies to AD forest and external trusts today.
Exploitation context
Not a code vulnerability and not listed in CISA KEV. No exploitation activity is cited in the source bundle. Impact is realized only when an attacker already has a foothold in one trusted domain and uses the trust to reach the other. Treat as a hardening and inventory item, not an active threat.
Researcher notes
This CVE is a legacy informational entry from the original 1999 CVE seed set describing a configuration state, not a software defect. No affected product, CWE, CVSS, or KEV entry exists. The lone reference is IBM X-Force ID 1284. Use it as a checklist item for domain trust inventory; do not expect vendor patches. Modern equivalents involve AD forest trust abuse tradecraft rather than this specific record.
Mitigation direction
- Inventory all existing domain trusts and document business justification for each.
- Remove trusts that no longer serve a documented purpose.
- Prefer one-way trusts over two-way where the use case allows.
- Enable SID filtering and selective authentication on remaining external trusts.
- Retire any surviving Windows NT domains in favor of supported Active Directory.
- Follow current Microsoft guidance on securing trust relationships.
Validation and detection
- Enumerate trusts with Active Directory Domains and Trusts or nltest to confirm current state.
- Compare enumerated trusts against an approved trust register.
- Review authenticated access paths across trusted domains for privileged group membership.
- Verify SID filtering and selective authentication settings on each external trust.
- Confirm no unsupported Windows NT domain controllers remain in scope.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-1999-0583 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://exchange.xforce.ibmcloud.com/vulnerabilities/1284CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.