CVE-1999-1431

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=ntbugtraq&m=91576100022688&w=2
http://marc.info/?l=ntbugtraq&m=91606260910008&w=2
http://www.securityfocus.com/bid/181Exploit, Vendor Advisory
http://marc.info/?l=ntbugtraq&m=91576100022688&w=2
http://marc.info/?l=ntbugtraq&m=91606260910008&w=2
http://www.securityfocus.com/bid/181Exploit, Vendor Advisory

Timeline

Published: Jan 7, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-14405.1Win32 ICQ 98a 1.30, and possibly other versions, does not display the entire portion of long filenames, which could allow attackers to send CVE-1999-14445.0genkey utility in Alibaba 2.0 generates RSA key pairs with an exponent of 1, which results in transactions that are sent in cleartext.CVE-1999-14507.5Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows CVE-1999-14515.0The Winmsdp.exe sample file in IIS 4.0 and Site Server 3.0 allows remote attackers to read arbitrary files.CVE-1999-14522.1GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstatio CVE-1999-14532.6Internet Explorer 4 allows remote attackers (malicious web site operators) to read the contents of the clipboard via the Internet WebBrowser CVE-1999-14544.6Macromedia "The Matrix" screen saver on Windows 95 with the "Password protected" option enabled allows attackers with physical access to the CVE-1999-14557.5RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user come CVE-1999-14565.0thttpd HTTP server 2.03 and earlier allows remote attackers to read arbitrary files via a GET request with more than one leading / (slash) c CVE-1999-14577.5Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is CVE-1999-14587.2Buffer overflow in at program in Digital UNIX 4.0 allows local users to gain root privileges via a long command line argument.CVE-1999-14607.2BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as th