ID |
CVE-1999-1431
|
Summary |
ZAK in Appstation mode allows users to bypass the "Run only allowed apps" policy by starting Explorer from Office 97 applications (such as Word), installing software into the TEMP directory, and changing the name to that for an allowed application, such as Winword.exe. |
References |
|
Vulnerable Configurations |
|
CVSS |
Base: | 4.6 (as of 18-10-2016 - 02:04) |
Impact: | |
Exploitability: | |
|
CWE |
NVD-CWE-Other |
CAPEC |
|
Access |
Vector | Complexity | Authentication |
LOCAL |
LOW |
NONE |
|
Impact |
Confidentiality | Integrity | Availability |
PARTIAL |
PARTIAL |
PARTIAL |
|
cvss-vector
via4
|
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
refmap
via4
|
bid | 181 | ntbugtraq | - 19990107 WinNT, ZAK and Office 97
- 19990109 WinNT, ZAK and Office 97
|
|
Last major update |
18-10-2016 - 02:04 |
Published |
07-01-2005 - 05:00 |
Last modified |
18-10-2016 - 02:04 |