CVE-1999-1359

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Dec 31, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-13602.1Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel moCVE-1999-13622.1Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with incCVE-1999-13632.1Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on CVE-1999-13642.1Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadContCVE-1999-13657.2Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXCVE-1999-13663.6Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easilyCVE-1999-13674.6Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which couldCVE-1999-13687.5AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft ECVE-1999-13694.6Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users CVE-1999-13707.2The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with phyCVE-1999-13717.2Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argumentCVE-1999-13724.6Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow