Windows Nt Security Vulnerabilities

CVE-1999-0489

MSHTML.DLL in Internet Explorer 5.0 allows a remote attacker to paste a file name into the file upload intrinsic control, a variant of "untrusted scripted paste" as described in...

CVE-1999-0570

Windows NT is not using a password filter utility, e.g....

CVE-1999-0140

Denial of service in RAS/PPTP on NT...

CVE-1999-0226

Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of...

CVE-1999-0578

A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry...

CVE-1999-0285

Denial of service in telnet from the Windows NT Resource Kit, by opening then immediately closing a...

CVE-1999-0549

Windows NT automatically logs in an administrator upon...

CVE-1999-0579

A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry...

CVE-1999-0581

The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical...

CVE-1999-0593

The default setting for the Winlogon key entry ShutdownWithoutLogon in Windows NT allows users with physical access to shut down a Windows NT system without logging...

CVE-1999-0560

A system-critical Windows NT file or directory has inappropriate...

CVE-1999-0444

Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log...

CVE-1999-0119

Windows NT 4.0 beta allows users to read and delete...

CVE-1999-0577

A Windows NT system's file audit policy does not log an event success or failure for non-critical files or...

CVE-1999-0595

A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be...

CVE-1999-0994

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack...

CVE-1999-0899

The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print...

CVE-1999-0898

Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler...

CVE-1999-0995

Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier...

CVE-1999-0715

Buffer overflow in Remote Access Service (RAS) client allows an attacker to execute commands or cause a denial of service via a malformed phonebook...

CVE-1999-0721

Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA...

CVE-1999-0716

Buffer overflow in Windows NT 4.0 help file utility via a malformed help...

CVE-1999-0726

An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image...

CVE-1999-0728

A Windows NT user can disable the keyboard or mouse by directly calling the IOCTLs which control...

CVE-1999-0755

Windows NT RRAS and RAS clients cache a user's password even if the user has not selected the "Save password"...

CVE-1999-0700

Buffer overflow in Microsoft Phone Dialer (dialer.exe), via a malformed dialer entry in the dialer.ini...

CVE-1999-0717

A remote attacker can disable the virus warning mechanism in Microsoft Excel...

CVE-1999-0909

Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route Pointer"...

CVE-1999-0723

The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user...

CVE-1999-0886

The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control...

CVE-1999-0918

Denial of service in various Windows systems via malformed, fragmented IGMP...

CVE-1999-0975

The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is...

CVE-1999-0987

Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of the domain...

CVE-1999-0382

The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated...

CVE-1999-0366

In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash...

CVE-1999-0391

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a...

CVE-1999-0224

Denial of service in Windows NT messenger service through a long...

CVE-1999-0384

The Forms 2.0 ActiveX control (included with Visual Basic for Applications 5.0) can be used to read text from a user's clipboard when the user accesses documents with ActiveX...

CVE-1999-0372

The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not...

CVE-1999-0376

Local users in Windows NT can obtain administrator privileges by changing the KnownDLLs list to reference malicious...