CVE-1999-1358 - When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only

Back Back to CVE browser

MEDIUM

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only

Published Mar 9, 2002

4.6

MEDIUM

CVSS 2.0

EPSS 1.41%

Description

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://support.microsoft.com/support/kb/articles/q157/6/73.asp
vendor-advisoryx_refsource_MSKBPatchVendor Advisory
http://www.iss.net/security_center/static/7400.php
vdb-entryx_refsource_XF

Link	Providers	Tags
http://support.microsoft.com/support/kb/articles/q157/6/73.asp		vendor-advisoryx_refsource_MSKBPatchVendor Advisory
http://www.iss.net/security_center/static/7400.php		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2002

Updated Aug 1, 2024

Reserved Aug 31, 2001

Link CVE-1999-1358

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-1999-1358

Red Hat

Severity n/a

Public date n/a

Links CVE-1999-1358