Security readout for executives and security teams
This entry flags that the legacy Windows NT Alerter and Messenger services are enabled on a system. These services were designed to broadcast administrative pop-up notices across a network, but attackers historically abused them to send spam, phishing messages, or gather information about a machine. It represents a configuration/exposure finding rather than a specific software flaw. Applies to legacy Windows NT-era systems (NT 4.0, Windows 2000, and early XP builds) with Alerter/Messenger services running. Modern Windows versions have these services removed or disabled by default, so real-world exposure is limited to unmaintained legacy hosts, embedded systems, or isolated OT environments still running vintage Windows. Low priority for modern estates. Treat as routine hygiene: verify no legacy Windows systems are exposing these services, especially in OT, lab, or acquired environments. Escalate only if legacy NT/2000-era hosts are discovered reachable from user or external networks. Mitigation focus: Disable the Alerter and Messenger services on any legacy Windows hosts where they are not required.; Block NetBIOS (UDP/TCP 137-139) and SMB (TCP 445) inbound from untrusted networks at the perimeter.; Retire or isolate end-of-life Windows NT/2000/XP systems that still expose these services..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-1999-0630 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.