4.6
CVSSv2

CVE-1999-0376

Published: 20/02/1999 Updated: 12/10/2018
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious programs.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows nt 4.0

microsoft windows nt 3.5.1

Exploits

source: wwwsecurityfocuscom/bid/234/info The names and mappings of kernel objects in NT are cached in the "object namespace" In this area, DLL mappings are kept in a section called KnownDlls By manipulating the namespace, it is possible to redirect calls to arbitrary dlls githubcom/offensive-security/exploitdb-bin-sploits/raw ...