{ "schema_version": "1.4.0", "id": "GHSA-w86c-8rjg-rxrp", "modified": "2022-04-29T01:27:44Z", "published": "2022-04-29T01:27:44Z", "aliases": [ "CVE-2003-1246" ], "details": "NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \\winnt\\system32\\drivers using the subst command.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-1246" }, { "type": "WEB", "url": "http://archives.neohapsis.com/archives/bugtraq/2003-01/0017.html" }, { "type": "WEB", "url": "http://archives.neohapsis.com/archives/bugtraq/2003-01/0018.html" }, { "type": "WEB", "url": "http://www.iss.net/security_center/static/10979.php" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/6511" } ], "database_specific": { "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2003-12-31T05:00:00Z" } }