CVE-1999-1358: Medium severity Microsoft Windows NT vulnerability
When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure the local ntconfig.pol file on Windows NT and Windows 2000 systems is writable by the administrator (or the account that applies user policy) so policy updates succeed, and set file permissions/ACLs to prevent standard local users from changing the file or marking it read-only.
Local Group Policy file (ntconfig.pol) file writable / attributes and ACLs = writable by the account applying policy; not writable/read-only for standard local users - Operational
Inspect existing ntconfig.pol files on affected Windows NT and Windows 2000 systems. If a file is read-only or not writable by the administrator, clear the read-only attribute or correct the ACLs so the administrator can update it, then reapply the user policy so changes take effect.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1358?
CVE-1999-1358 is considered a medium severity vulnerability as it allows local users to bypass policy restrictions.
How do I fix CVE-1999-1358?
To fix CVE-1999-1358, ensure the local ntconfig.pol file is set to be writable only by authorized administrators.
What versions of Windows are affected by CVE-1999-1358?
CVE-1999-1358 affects Microsoft Windows NT and Windows 2000.
Can local users exploit CVE-1999-1358 to gain administrative privileges?
Local users may exploit CVE-1999-1358 to bypass restrictions but this does not provide administrative privileges.
Is CVE-1999-1358 a configuration issue or software flaw?
CVE-1999-1358 is primarily a configuration issue related to the permissions of the ntconfig.pol file.