CVE-1999-1476

A bug in Intel Pentium processor MMX and Overdrive allows local users to cause a denial of service hang in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem...

CVE-1999-1127

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

CVE-1999-1132

CVE-1999-1132 affects Windows NT 4.0. The vulnerability allows remote users to cause a denial of service (crash) by sending crafted source routing data, specifically (1) a Routing Information Field with hop count greater than 7, or (2) a list containing duplicate Token Ring IDs. The Connected rec...

CVE-2001-0373

Technical details about CVE-2001-0373 are not publicly provided in the supplied documents; only the general description is present. Monitor for updates.

CVE-1999-1452: Undefined Security Weakness

GINA in Windows NT 4.0 allows attackers with physical access to display a portion of the clipboard of the user who has locked the workstation by pasting CTRL-V the contents into the username prompt...

CVE-2000-1200: Undefined Security Weakness

Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users...

CVE-1999-1132: Undefined Security Weakness

Windows NT 4.0 allows remote attackers to cause a denial of service crash via extra source routing data such as 1 a Routing Information Field RIF field with a hop count greater than 7, or 2 a list containing duplicate Token Ring IDs...

CVE-1999-1317: Undefined Security Weakness

Windows NT 4.0 SP4 and earlier allows local users to gain privileges by modifying the symbolic link table in the ?? object folder using a different case letter upper or lower to point to a different device...

CVE-2001-0662: Undefined Security Weakness

RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service loss of RPC services via a malformed request...

CVE-1999-1157: Undefined Security Weakness

Tcpip.sys in Windows NT 4.0 before SP4 allows remote attackers to cause a denial of service via an ICMP Subnet Mask Address Request packet, when certain multiple IP addresses are bound to the same network interface...

CVE-2001-0543: Missing Release of Memory after Effective Lifetime

Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed posts...

CVE-2001-0373: Undefined Security Weakness

The default configuration of the Dr. Watson program in Windows NT and Windows 2000 generates user.dmp crash dump files with world-readable permissions, which could allow a local user to gain access to sensitive information...

CVE-2001-0540: Undefined Security Weakness

Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed Remote Desktop Protocol RDP requests to port 3389...

CVE-2001-0513: Undefined Security Weakness

Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not connecting to the redirected port...

CVE-1999-1127: Missing Release of Resource after Effective Lifetime

Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service resource exhaustion via a series of connections containing malformed data, aka the "Named Pipes Over RPC" vulnerability...

CVE-1999-1358: Undefined Security Weakness

When an administrator in Windows NT or Windows 2000 changes a user policy, the policy is not properly updated if the local ntconfig.pol is not writable by the user, which could allow local users to bypass restrictions that would otherwise be enforced by the policy, possibly by changing the policy...

CVE-1999-0815: Undefined Security Weakness

Memory leak in SNMP agent in Windows NT 4.0 before SP5 allows remote attackers to conduct a denial of service memory exhaustion via a large number of queries...

CVE-1999-1359: Undefined Security Weakness

When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies...

CVE-1999-1316: Undefined Security Weakness

Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess...

CVE-1999-1455: Undefined Security Weakness

RSH service utility RSHSVC in Windows NT 3.5 through 4.0 does not properly restrict access as specified in the .Rhosts file when a user comes from an authorized host, which could allow unauthorized users to access the service by logging in from an authorized host...