CVE-1999-1217
MediumExploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.
Risk Assessment
The organization may be vulnerable to attacks from local users who can exploit this vulnerability to execute malicious software with system-level privileges.
Recommendation
It is recommended to remove the current working directory from the PATH or implement restrictions on write permissions in critical system directories.
Original NVD description (English source)
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.