CVE Catalog
CVE-1999-0824
MediumExploitation Probability (EPSS)
Elevated risk1.17%
63th percentile - higher than 63% of all known CVEs
Summary
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off. This may allow that user to modify the location of folders accessed by later users.
Risk Assessment
The risk is that a user may manipulate access to folders of other users, potentially leading to unauthorized access to data.
Recommendation
It is recommended to monitor the use of the SUBST command and implement a policy that prevents users from mapping drive letters to folders after logging off.
Original NVD description (English source)
A Windows NT user can use SUBST to map a drive letter to a folder, which is not unmapped after the user logs off, potentially allowing that user to modify the location of folders accessed by later users.