CVE-1999-1359

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://support.microsoft.com/support/kb/articles/q163/8/75.aspPatch, Vendor Advisory
http://www.iss.net/security_center/static/7401.php
http://support.microsoft.com/support/kb/articles/q163/8/75.aspPatch, Vendor Advisory
http://www.iss.net/security_center/static/7401.php

Timeline

Published: Dec 31, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-13602.1Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mo CVE-1999-13622.1Win32k.sys in Windows NT 4.0 before SP2 allows local users to cause a denial of service (crash) by calling certain WIN32K functions with inc CVE-1999-13632.1Windows NT 3.51 and 4.0 allow local users to cause a denial of service (crash) by running a program that creates a large number of locks on CVE-1999-13642.1Windows NT 4.0 allows local users to cause a denial of service (crash) via an illegal kernel mode address to the functions (1) GetThreadCont CVE-1999-13657.2Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EX CVE-1999-13663.6Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily CVE-1999-13674.6Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could CVE-1999-13687.5AV Option for MS Exchange Server option for InoculateIT 4.53, and possibly other versions, only scans the Inbox folder tree of a Microsoft E CVE-1999-13694.6Real Media RealServer (rmserver) 6.0.3.353 stores a password in plaintext in the world-readable rmserver.cfg file, which allows local users CVE-1999-13707.2The setup wizard (ie5setup.exe) for Internet Explorer 5.0 disables (1) the screen saver, which could leave the system open to users with phy CVE-1999-13717.2Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument CVE-1999-13724.6Triactive Remote Manager with Basic authentication enabled stores the username and password in cleartext in registry keys, which could allow