CVE-1999-0382

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Mar 12, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-03837.5ACC Tigris allows public access without a login.CVE-1999-03844.6The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the us CVE-1999-03865.0Microsoft Personal Web Server and FrontPage Personal Web Server in some Windows systems allows a remote attacker to read files on the server CVE-1999-03877.8A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.CVE-1999-03884.6DataLynx suGuard trusts the PATH environment variable to execute the ps command, allowing local users to execute commands as root.CVE-1999-03897.2Buffer overflow in the bootp server in the Debian Linux netstd package.CVE-1999-03907.2Buffer overflow in Dosemu Slang library in Linux.CVE-1999-03917.5The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response an CVE-1999-03925.0Buffer overflow in Thomas Boutell's cgic library version up to 1.05.CVE-1999-03935.0Remote attackers can cause a denial of service in Sendmail 8.8.x and 8.9.2 by sending messages with a large number of headers.CVE-1999-039410.0DPEC Online Courseware allows an attacker to change another user's password without knowing the original password.CVE-1999-03955.1A race condition in the BackWeb Polite Agent Protocol allows an attacker to spoof a BackWeb server.