CVE-1999-1233

IIS 4.0 does not properly restrict access for the initial session request from a user's IP address if the address does not resolve to a DNS domain, aka the "Domain Resolution" vulnerability...

CVE-1999-0815

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service memory exhaustion via a large number of queries...

CVE-1999-1157

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface...

CVE-2001-0506

Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes SSI directive for a long filename, which triggers the overflow when the directory name is added, aka the "SSI privilege elevation" vulnerability...

CVE-1999-1222

CVE-1999-1222 affects Netbt.sys on Windows NT 4.0. A remote DNS server can cause a denial of service (crash) by returning 0.0.0.0 as the IP address for a DNS hostname lookup. Impact: availability degradation/partial DoS as described; exploitation details are not provided in the supplied documents...

CVE-1999-1452

CVE-1999-1452 concerns GINA in Windows NT 4.0 where an attacker with physical access can cause the user’s locked workstation clipboard to be partially exposed by pasting into the username prompt. The description states the effect but does not provide root-cause details, affected components beyond...

CVE-1999-1360

Windows NT 4.0 is affected by CVE-1999-1360. A local user can cause a denial of service by a user-mode application closing a handle that was opened in kernel mode, leading to a kernel crash when the kernel closes the handle. The NVD data shows a low base score (2.1) with local attack vector and p...

CVE-1999-1472

Internet Explorer 4.0 allows remote attackers to read arbitrary text and HTML files on the user's machine via a small IFRAME that uses Dynamic HTML DHTML to send the data to the attacker, aka the Freiburg text-viewing issue...

CVE-2001-0662

RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service loss of RPC services via a malformed request...

CVE-1999-1044

The CVE-1999-1044 entry concerns the Advanced File System Utility (advfs) in Digital UNIX, affecting versions 4.0 through 4.0d. The vulnerability enables local users to gain privileges, but the provided documents do not disclose the exact root cause, vulnerable function/file, or affected componen...

CVE-2001-0545

IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service crash via a malformed request that specifies a length that is different than the actual length...

CVE-1999-1148

CVE-1999-1148 affects the FTP service in IIS 4.0 and earlier, where remote attackers can cause a denial of service by opening many PASV connections concurrently. The available documents confirm the vulnerable component (IIS FTP), the root cause (resource exhaustion due to multiple PASV sessions),...

CVE-1999-1233

Product/affected component: IIS 4.0. Vulnerability description: The “Domain Resolution” issue occurs because access is not properly restricted for the initial session request from an IP address that does not resolve to a DNS domain. Root cause (as stated): Improper restriction of initial session ...

CVE-1999-1127

CVE-1999-1127 affects Windows NT 4.0. The vulnerability stems from improper handling of invalid named pipe RPC connections, leading to resource exhaustion and a denial of service when a remote attacker establishes a sequence of connections sending malformed data. The issue is tied to the shutdown...

CVE-2001-0543

The CVE-2001-0543 issue affects the NNTP service in Windows NT 4.0 and Windows 2000, where a memory leak can be triggered by processing a large number of malformed posts. This memory growth can lead to denial of service through exhaustion of resources. The provided material does not specify exact...

EUVD-2001-0535

Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed posts...

CVE-2001-0545

CVE-2001-0545 affects IIS 4.0 with URL redirection enabled. A malformed request with a length mismatch can cause the server to crash, yielding a remote denial of service. The provided documents do not detail exploitation steps. For remediation, see MS01-044 (Microsoft security bulletin) and relat...

CVE-1999-1317

CVE-1999-1317: A local privilege-escalation vulnerability affecting Windows NT 4.0 SP4 and earlier. The flaw arises from allowing modification of the symbolic link table in the ?? object folder by varying case letters to point to a different device, enabling local users to gain privileges. The co...

CVE-1999-1132

Windows NT 4.0 allows remote attackers to cause a denial of service crash via extra source routing data such as 1 a Routing Information Field RIF field with a hop count greater than 7, or 2 a list containing duplicate Token Ring IDs...

CVE-2000-0457

Summary: CVE-2000-0457 affects Microsoft IIS 4.0/5.0 via ISM.DLL, enabling remote disclosure of file contents by requesting a file and appending spaces and ".HTR" (the File Fragment Reading vulnerability). Affected component: ISM.DLL in IIS 4.0/5.0 handling .HTR requests. Impact: partial confiden...