VULNERABILITY INTELLIGENCE
CVE-1999-1365
CVSS score7.2 HIGH
EPSS probability2.79%
CISA KEVNot currently listed
Published1999-06-28
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Windows NT searches a user's home directory (%systemroot% by default) before other directories to find critical programs such as NDDEAGNT.EXE, EXPLORER.EXE, USERINIT.EXE or TASKMGR.EXE, which could allow local users to bypass access restrictions or gain privileges by placing a Trojan horse program into the root directory, which is writable by default.