First published: Fri Dec 31 1999(Updated: )
Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the \?? object folder using a different case letter (upper or lower) to point to a different device.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows NT | <=4.0 | |
<=4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-1317 has a high severity as it allows local users to gain unauthorized privileges.
To fix CVE-1999-1317, upgrade Microsoft Windows NT to a version later than 4.0 SP4.
CVE-1999-1317 affects Windows NT 4.0 with Service Pack 4 and earlier.
CVE-1999-1317 is a privilege escalation vulnerability.
CVE-1999-1317 requires local access to exploit, so it cannot be exploited remotely.