4.6
CVSSv2

CVE-1999-1431

Published: 07/01/2005 Updated: 18/10/2016
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 465
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft zero administration kit 1.0

Exploits

source: wwwsecurityfocuscom/bid/181/info Zero Administration Kit (ZAK) was designed to allow administrators to (among other things) lock down the NT environment and restrict the user's access to certain applications and system functions In an instance where the end-user is not allowed to execute Windows Explorer and other "forbidden app ...