CVE-1999-0886

CriticalCVSS 9.0/10Last modified Jun 16, 2026

Description

The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager.

Metrics

CVSS 2.0 9.0/10AV:N/AC:L/Au:S/C:C/I:C/A:C

Weakness enumeration

CWE-16

Affected software

No affected versions have been published.

Timeline

Published
Sep 17, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-08875.0FTGate web interface server allows remote attackers to read files via a .. (dot dot) attack.CVE-1999-08884.6dbsnmp in Oracle Intelligent Agent allows local users to gain privileges by setting the ORACLE_HOME environmental variable, which dbsnmp useCVE-1999-08897.5Cisco 675 routers running CBOS allow remote attackers to establish telnet sessions if an exec or superuser password has not been set.CVE-1999-08907.5iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error.CVE-1999-08915.0The "download behavior" in Internet Explorer 5 allows remote attackers to read arbitrary files via a server-side redirect.CVE-1999-08924.6Buffer overflow in Netscape Communicator before 4.7 via a dynamic font whose length field is less than the size of the font.CVE-1999-08932.1userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.CVE-1999-089410.0Red Hat Linux screen program does not use Unix98 ptys, allowing local users to write to other terminals.CVE-1999-08957.5Firewall-1 does not properly restrict access to LDAP attributes.CVE-1999-089610.0Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username CVE-1999-08987.2Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooCVE-1999-08997.2The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to s