CVE-1999-0718

MediumCVSS 6.2/10Last modified Jun 16, 2026

Description

IBM GINA, when used for OS/2 domain authentication of Windows NT users, allows local users to gain administrator privileges by changing the GroupMapping registry key.

Metrics

CVSS 2.0 6.2/10AV:L/AC:H/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9908&L=ntbugtraq&F=&S=&P=5534
http://www.securityfocus.com/bid/608Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3166
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind9908&L=ntbugtraq&F=&S=&P=5534
http://www.securityfocus.com/bid/608Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/3166

Timeline

Published: Mar 12, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-07194.6The Guile plugin for the Gnumeric spreadsheet package allows attackers to execute arbitrary code.CVE-1999-07204.6The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.CVE-1999-07217.8Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request.CVE-1999-072210.0The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages.CVE-1999-07237.1The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user CVE-1999-07244.6Buffer overflow in OpenBSD procfs and fdescfs file systems via uio_offset in the readdir() function.CVE-1999-07257.1When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain file CVE-1999-07267.8An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header.CVE-1999-07275.0A kernel leak in the OpenBSD kernel allows IPsec packets to be sent unencrypted.CVE-1999-07287.8A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control them.CVE-1999-07295.0Buffer overflow in Lotus Notes LDAP (NLDAP) allows an attacker to conduct a denial of service through the ldap_search request.CVE-1999-073010.0The zsoelim program in the Debian man-db package allows local users to overwrite files via a symlink attack.