4071 matches found
CVE-2000-0226
IIS 4.0 allows attackers to cause a denial of service by requesting a large buffer in a POST or PUT command which consumes memory, aka the "Chunked Transfer Encoding Buffer Overflow Vulnerability."...
Halloween Linux 4.0 / SuSE Linux 6.0/6.1/6.2/6.3 - 'kreatecd' Local Privilege Escalation
source: https://www.securityfocus.com/bid/1061/info A vulnerability exists in the kreatecd program for Linux. This program is a graphical front end to the cdrecord program, and is installed setuid root. This program will blindly trust the configuration of the path to cdrecord, as specified by the...
iis-enumerate.txt
I was recently auditing the security on one of my web servers when I cameacross a new Extension Enumerate Root Web Server Directory Vulnerability forIIS 4.0. Going to the main website and asking for anything.idq I get thepage cannot be found. But if the files for the web server reside on a sharet...
Microsoft Windows NT 4.0 - User Shell Folders
Microsoft Windows NT 4.0 - User Shell Folders source: https://www.securityfocus.com/bid/1042/info The registry value HKEYLOCALMACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Startup specifies the shared startup folder for all users on a system. This key is set...
CVE-2000-0089
The rdisk utility in Microsoft Terminal Server Edition and Windows NT 4.0 stores registry hive information in a temporary file with permissions that allow local users to read it, aka the "RDISK Registry Enumeration File" vulnerability...
CVE-1999-0119
CVE-1999-0119 affects Windows NT 4.0 beta; it enables users to read and delete network shares. The vulnerability is rated CVSSv2 10.0 (HIGH) with network access, no authentication, and complete impact on confidentiality, integrity, and availability. The provided documents do not include a remedia...
CVE-1999-0488
CVE-1999-0488 affects Internet Explorer 4.0 and 5.0. The vulnerability is a variant of the “cross frame” issue that allows a remote attacker to execute security scripts in a different security context via malicious URLs. The description indicates this is a remote code execution-style weakness thr...
CVE-2000-0071
Microsoft IIS 4.0 is affected by CVE-2000-0071 via an information-disclosure path in the IDA/IDQ handling. A remote attacker can request non-existent files with .ida or .idq extensions to obtain the real document-root pathname, potentially aiding further targeted attacks. The issue is evidenced i...
CVE-1999-0899
The CVE-1999-0899 issue concerns the Windows NT 4.0 print spooler. The vulnerability arises from inappropriate permissions that allow a local user to specify an alternate print provider, enabling the execution of arbitrary commands on the affected system. Across provided documents, this is consis...
CVE-1999-0898
The CVE-1999-0898 entry describes a buffer overflow in the Windows NT 4.0 print spooler . The underlying issue is triggered by a malformed spooler request, with potential impact including privilege escalation and denial of service . Affected software is Windows NT 4.0's print spooler component; t...
CVE-1999-0898
Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request...
CVE-2000-0070
NtImpersonateClientOfPort local procedure call in Windows NT 4.0 allows local users to gain privileges, aka "Spoofed LPC Port Request."...
CVE-2000-0071
IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with .ida or .idq extensions...
CVE-1999-0876
CVE-1999-0876 affecting Microsoft Internet Explorer 4.0, where a buffer overflow is triggered via an EMBED tag. The connected Red Hat and NVD entries reiterate this description. The documented impact indicates complete confidentiality, integrity, and availability compromises with a base score of ...
CVE-1999-0867
Denial of service in IIS 4.0 via a flood of HTTP requests with malformed headers...
CVE-1999-0716
Buffer overflow in Windows NT 4.0 help file utility via a malformed help file...
CVE-1999-0871
The vulnerability CVE-1999-0871 affects Internet Explorer 4.0 and 4.01, described as the "Cross Frame Navigate" issue where a remote attacker can read files due to IE’s cross-frame security. The provided documents identify the affected product and the basic impact (read access to files) but do no...
CVE-1999-0701
The vulnerability CVE-1999-0701 relates to an unattended installation of Windows NT 4.0 where the installation file could contain sensitive information such as the local Administrator password. This is confirmed across multiple sources (NVD/NVD-derived entries and Red Hat security references). No...
CVE-1999-0716
CVE-1999-0716 is a historical vulnerability described across multiple sources as a buffer overflow in Windows NT 4.0’s help file utility triggered by a malformed help file. The Red Hat advisory and CVE entries confirm the issue but do not provide concrete exploit details beyond the basic descript...