Microsoft Windows NT 4.0/2000 Policy ntconfig.pol privileges management

Summaryinfo

A vulnerability classified as problematic was found in Microsoft Windows NT 4.0/2000. The impacted element is an unknown function of the file ntconfig.pol of the component Policy Handler. Such manipulation leads to privileges management. This vulnerability is documented as CVE-1999-1358. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Microsoft Windows NT 4.0/2000 (Operating System). Affected by this issue is an unknown function of the file ntconfig.pol of the component Policy Handler. The manipulation with an unknown input leads to a privileges management vulnerability. Using CWE to declare the problem leads to CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Impacted is confidentiality, integrity, and availability. CVE summarizes:

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy file to be read-only.

The weakness was released 12/31/1999 as confirmed knowledge base article (Website). The advisory is shared for download at support.microsoft.com. This vulnerability is handled as CVE-1999-1358. The exploitation is known to be easy. The attack needs to be approached locally. The successful exploitation requires a simple authentication. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1068.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at X-Force (7400). Entries connected to this vulnerability are available at VDB-15180, VDB-15179, VDB-15178 and VDB-15177. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

Version

• 2000
• NT 4.0

License

• commercial

Website

• Vendor: https://www.microsoft.com/
• Product: https://www.microsoft.com/en-us/windows

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion