Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2004-09-01T04:00:00

Updated: 2024-08-01T17:11:02.920Z

Reserved: 2001-08-31T00:00:00

Link: CVE-1999-1365

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 1999-06-28T04:00:00.000

Modified: 2017-10-26T01:29:00.267

Link: CVE-1999-1365

cve-icon Redhat

No data.