CVE-1999-0824
MediumExploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off. This may allow that user to modify the location of folders accessed by later users.
Risk Assessment
The risk is that a user may manipulate access to folders of other users, potentially leading to unauthorized access to data.
Recommendation
It is recommended to monitor the use of the SUBST command and implement a policy that prevents users from mapping drive letters to folders after logging off.
Other vulnerabilities in Windows NT
See all- CVE-2000-1227Medium
Windows NT 4.0 and Windows 2000 hosts allow remote attackers to cause a denial of service (unavailable connections) by sending multiple SMB SMBnegprots requests but not reading the response that is sent back.
- CVE-1999-1579Medium
The Cenroll ActiveX control (xenroll.dll) for Terminal Server Editions of Windows NT 4.0 and Windows NT Server 4.0 before SP6 allows remote attackers to cause a denial of service (resource consumption) by creating a large number of arbitrary files on the target machine.
- CVE-1999-1452Low
GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting (CTRL-V) the contents into the username prompt.
- CVE-1999-1127High
Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, allowing remote attackers to cause a denial of service (resource exhaustion) via a series of connections containing malformed data.
- CVE-1999-1132Medium
Windows NT 4.0 allows remote attackers to cause a denial of service (crash) via extra source routing data such as a Routing Information Field (RIF) field with a hop count greater than 7 or a list containing duplicate Token Ring IDs.
- CVE-1999-0994Medium
Windows NT with SYSKEY reuses the keystream used for encrypting SAM password hashes, allowing an attacker to crack passwords.
- CVE-1999-0987High
Windows NT improperly downloads a system policy if the domain user logs into the domain with a space at the end of the domain name.
- CVE-1999-1234Medium
LSA (LSASS.EXE) in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in calls to SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo.
- CVE-2000-0328Medium
Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), allowing remote attackers to perform spoofing and session hijacking.
- CVE-1999-0728High
A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.
Original NVD description (English source)
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS