CVE-1999-1365
CVSS 2.0 Score 7.2 of 10 (high)
Details
Published Jun 28, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-1365 is a vulnerability affecting Windows NT systems. The issue lies in the operating system's search order for critical programs, which prioritizes the user's home directory (%systemroot% by default). Attackers can exploit this by placing a Trojan horse program into the root directory, which is writable by default. By doing so, they can bypass access restrictions or elevate their privileges by manipulating the targeted applications, such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE, or TASKMGR.EXE.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows NT
Affected Vendors
- Microsoft