PT-1997-1140 · Microsoft · Windows Nt

Publicado 1997-01-01 · Atualizado 2018-08-13 · CVE-1999-0496

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows NT version 4.0

Description The issue allows a Windows NT 4.0 user to gain administrative rights by forcing NtOpenProcessToken to succeed, regardless of the user's permissions.

Recommendations For Windows NT version 4.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-1999-0496

Produtos afetados

Windows Nt

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0496 · Nota de Segurança
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ146965 · Nota