CVE-1999-0581: Undefined Security Weakness

The HKEYCLASSESROOT key in a Windows NT system has inappropriate, system-critical permissions...

CVE-1999-0589: Undefined Security Weakness

A system-critical Windows NT registry key has inappropriate permissions...

CVE-1999-0603: Undefined Security Weakness

In Windows NT, an inappropriate user is a member of a group, e.g. Administrator, Backup Operators, Domain Admins, Domain Guests, Power Users, Print Operators, Replicators, System Operators, etc...

CVE-1999-0229: Undefined Security Weakness

Denial of service in Windows NT IIS server using .....

CVE-1999-0582: Undefined Security Weakness

A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc...

CVE-1999-0665: Undefined Security Weakness

An application-critical Windows NT registry key has an inappropriate value...

CVE-1999-0576: Undefined Security Weakness

A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories...

CVE-1999-0200: Undefined Security Weakness

Windows NT FTP server WFTP with the guest account enabled without a password allows an attacker to log into the FTP server using any username and password...

CVE-2000-0121

The Recycle Bin utility in Windows NT and Windows 2000 allows local users to read or modify files by creating a subdirectory with the victim's SID in the recycler directory, aka the "Recycle Bin Creation" vulnerability...

Microsoft Windows NT 4.0 - Recycle Bin Pre-created Folder

Microsoft Windows NT 4.0 - Recycle Bin Pre-created Folder Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Recycle Bin Pre-created Folder Vulnerability source: https://www.securityfocus.com/bid/963/info When an NT user uses the Recycle Bin for the first time on a given partition, a folder is...

Microsoft Windows NT 4.0 - Recycle Bin Pre-created Folder

Microsoft Windows NT 4.0/SP1/SP2/SP3/SP4/SP5/SP6 Recycle Bin Pre-created Folder Vulnerability source: https://www.securityfocus.com/bid/963/info When an NT user uses the Recycle Bin for the first time on a given partition, a folder is created in the \Recycler folder on that partition with the nam...

CVE-1999-0595

A Windows NT system does not clear the system page file during shutdown, which might allow sensitive information to be recorded...

IE5.01 Frozes system on huge images

IE5.01 Frozes system on huge images 20.01.2000 Reproducability: Open http://www.security.nnov.ru/files/ie5hang.asp to test vulnerability save you data before : I can reproduce this bug on all PCs with Windows NT 4.0 SP5-6a + IE5, but reaction is different. Reaction can probably depend on type of...

CVE-1999-0994

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords...

CVE-1999-0898

The CVE-1999-0898 entry describes a buffer overflow in the Windows NT 4.0 print spooler . The underlying issue is triggered by a malformed spooler request, with potential impact including privilege escalation and denial of service . Affected software is Windows NT 4.0's print spooler component; t...

CVE-1999-0994

SYSKEY in Windows NT pre-December 1999 had a flaw that reuses part of an RC4 keystream to encrypt the SAM database. This enables dictionary attacks against SAM passwords if an attacker obtains a copy of the SAM database. Microsoft addressed this in December 1999 (MS99-056). The CERT advisory reit...

CVE-1999-0899

The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider...

CVE-1999-0995

Windows NT Local Security Authority LSA allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids function which looks up the SID, aka "Malformed Security Identifier Request."...

CVE-1999-0899

The CVE-1999-0899 issue concerns the Windows NT 4.0 print spooler. The vulnerability arises from inappropriate permissions that allow a local user to specify an alternate print provider, enabling the execution of arbitrary commands on the affected system. Across provided documents, this is consis...

CVE-1999-0995

The CVE-1999-0995 entry affects Microsoft Windows NT, specifically the Local Security Authority (LSA). The vulnerability arises from malformed arguments passed to the LsaLookupSids function (which looks up a Security Identifier), enabling remote attackers to cause a denial of service. This is the...