CVE-1999-0376

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Feb 20, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-03775.0Process table attack in Unix systems allows a remote attacker to perform a denial of service by filling a machine's process tables through mCVE-1999-03785.0InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.CVE-1999-03797.5Microsoft Taskpads allows remote web sites to execute commands on the visiting user's machine via certain methods that are marked as Safe foCVE-1999-03804.6SLMail 3.1 and 3.2 allows local users to access any file in the NTFS file system when the Remote Administration Service (RAS) is enabled by CVE-1999-03817.2super 3.11.6 and other versions have a buffer overflow in the syslog utility which allows a local user to gain root access.CVE-1999-03827.2The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with CVE-1999-03837.5ACC Tigris allows public access without a login.CVE-1999-03844.6The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the usCVE-1999-03865.0Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the serverCVE-1999-03877.8A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.CVE-1999-03884.6DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.CVE-1999-03897.2Buffer overflow in the bootp server in the Debian Linux netstd package.
CVE-1999-0376: Medium severity, CVSS 4.6 | Vulnix