CVE-1999-1358

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the…

published March 9, 2002

CVSS
—
EPSS
1%
Percentile
72.4
In the wild
Unconfirmed
What it is

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01410 · 72.4th percentile
Published
2002-03-09T05:00Z
EPSS history
Timeline
  • 09 MAR 05:00Z
    When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the…
    cvelistv5