3801 matches found
CVE-1999-1363: Undefined Security Weakness
Windows NT 3.51 and 4.0 allow local users to cause a denial of service crash by running a program that creates a large number of locks on a file, which exhausts the NonPagedPool...
CVE-1999-1360: Undefined Security Weakness
Windows NT 4.0 allows local users to cause a denial of service via a user mode application that closes a handle that was opened in kernel mode, which causes a crash when the kernel attempts to close the handle...
CVE-1999-1356: Undefined Security Weakness
Compaq Integration Maintenance Utility as used in Compaq Insight Manager agent before SmartStart 4.50 modifies the legal notice caption LegalNoticeCaption and text LegalNoticeText in Windows NT, which could produce a legal notice that is in violation of the security policy...
CVE-1999-1222: Undefined Security Weakness
Netbt.sys in Windows NT 4.0 allows remote malicious DNS servers to cause a denial of service crash by returning 0.0.0.0 as the IP address for a DNS host name lookup...
CVE-1999-1476: Undefined Security Weakness
A bug in Intel Pentium processor MMX and Overdrive allows local users to cause a denial of service hang in Intel-based operating systems such as Windows NT and Windows 95, via an invalid instruction, aka the "Invalid Operand with Locked CMPXCHG8B Instruction" problem...
CVE-2001-0663: Undefined Security Weakness
Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol RDP packets...
Смена неменяемого пароля в Windows NT (protection bypass)
Изменить неизменяемый пароль или пароль блокированной записи можно через IIS...
NT user (who is locked changing his/her password by administrator ) can bypass the security policy and Change the password.
Hi, Our PT team found the following vulnerability in security policy implementation with NT Server and IIS 4.0. NT user who is locked changing his/her password by administrator can bypass the security policy and Change the password. Vulnerable: Microsoft Windows NT Server 4.0 + IIS 4.0 + Service...
Netwin Webnews Buffer Overflow Vulnerability (#NISR18022002)
NGSSoftware Insight Security Research Advisory Name: Netwin Webnews.exe Systems Affected: IIS4 & IIS5 on Windows NT/2000 Severity: High Risk Vendor URL: http://www.netwinsite.com Author: Mark Litchfield [email protected] Date: 18th February 2002 Advisory number: NISR18022002 Advisory URL:...
CVE-2002-0053: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and...
Castelle Faxpress: Password used for NT Print queue can be discl osed in Plain Text
Overview I have reported this to Castelle and they told me it is a feature for troubleshooting, however they will make the change the next time they release the Faxpress Software. I just thought that other admins should be made aware so they can check their systems are secured correctly. Printing...
CVE-2001-0958
CVE-2001-0958 affects Trend Micro InterScan eManager for NT Ver.3.51 (English) and NT Ver.3.51J. The vulnerability is a remotely exploitable buffer overflow in the eManager CGI interface, caused by long arguments to multiple DLLs (register.dll, ContentFilter.dll, SFNofitication.dll, TOP10.dll, Sp...
CVE-2001-0958: Undefined Security Weakness
Buffer overflows in eManager plugin for Trend Micro InterScan VirusWall for NT 3.51 and 3.51J allow remote attackers to execute arbitrary code via long arguments to the CGI programs 1 register.dll, 2 ContentFilter.dll, 3 SFNofitication.dll, 4 register.dll, 5 TOP10.dll, 6 SpamExcp.dll, and 7...
Possible privilege escalation with NDS for NT
The following security exposure may or may not exist for any shop running NDS for NT. We contacted Novell last August with this exposure. They failed to respond. We later contacted Simple Nomad and he did a good job bringing the vulnerability to Novell's attention. Novell indicates that this is...
Security Bulletin MS02-001
Title: Trusting Domains Do Not Verify Domain Membership of SIDs in Authorization Data Date: 30 January 2002 Software: Windows NT 4.0, Windows 2000 Impact: Privilege Elevation Max Risk: Moderate Bulletin: MS02-001 Microsoft encourages customers to review the Security Bulletin at:...
SECURITY.NNOV: stream3 Windows NT/2000 DoS (Q280446)
Dear, Some of you may be interested in information about Microsoft Q280446 issue patch included into SP2. Just to throw the light on it we've decided to publish information because Microsoft declared the deadline for official Windows NT 4.0 support. Topic: Windows NT/2000 DoS via stream3 flood...
ZBServer Pro DoS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZBServer Pro DoS Vulnerability Type: DoS, crashes Daemon Release Date: December 15, 2002 Product / Vendor: ZBServer Pro Edition for Windows 95 and NT offers all the functionality of an integrated Web, Gopher, FTP and Chat server...
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server malformed Web Publisher command causes denial-of-service
Overview A vulnerability exists in iPlanet Web Server, Enterprise Edition and Netscape Enterprise Server in which a malformed Web Publisher command can crash the web server process. This vulnerability only affects Windows NT based servers. Description ProCheckup has reported a vulnerability in...
Older Versions of Cisco PIX Firewall Manager permits retrieval of files
Overview A vulnerability in versions of the Cisco PIX Firewall Manager PFM in use circa September 1998 allows intruders to retrieve files from the host running PFM. Description A vulnerability in the Cisco PIx FIrewall manager allows an intruder to retrieve files from the host running PFM. In...
