CVE-2001-0791

Trend Micro InterScan VirusWall for Windows NT is vulnerable via CGI programs that handle configuration and do not restrict access. Remote attackers could modify configuration by directly invoking these CGI scripts. Root cause is lack of access controls on certain CGI endpoints. Affected product/...

CVE-2001-0791: Undefined Security Weakness

Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly calling certain CGI programs, which do not restrict access...

CVE-2001-0509

Vulnerabilities in RPC servers in 1 Microsoft Exchange Server 2000 and earlier, 2 Microsoft SQL Server 2000 and earlier, 3 Windows NT 4.0, and 4 Windows 2000 allow remote attackers to cause a denial of service via malformed inputs...

CVE-2001-0543

Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service memory exhaustion via a large number of malformed posts...

CVE-2001-0687

Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by 1 issuing a CD command CD C: followed by the LS command, 2 specifying arbitrary paths in the UNC format \computername\sharename...

Check Point FireWall-1 GUI Log Viewer vulnerability (vuldb 3336)

Check Point response to FireWall-1 GUI Log Viewer Vulnerability An issue exists in VPN-1/FireWall-1 Management Servers running on Windows NT or Windows 2000. A malicious administrator can exploit a buffer overflow condition in the GUI authentication code to potentially impair management station...

CVE-2001-0245

Microsoft Index Server 2.0 (Windows NT 4.0) and Indexing Service (Windows 2000) are affected by a vulnerability described as a Malformed Hit-Highlighting issue that allows remote readers to view server-side include files via a crafted search request. The CERT advisory confirms the ability to read...

Пароли в открытом тексте в ARCServe for NT (readable cleartext passwords)

На разделяемом диске находится файл с паролем в открытом виде...

CVE-2001-0245: Undefined Security Weakness

Microsoft Index Server 2.0 in Windows NT 4.0, and Indexing Service in Windows 2000, allows remote attackers to read server-side include files via a malformed search request, aka a new variant of the "Malformed Hit-Highlighting" vulnerability...

Security Vulnerability with Microsoft Index Server 2.0(Sample fil e reveals file info, physical path etc)

Hi I noticed index server sample file is vulnerable which reveals file info and physical path. Vulnerable Microsoft Index Server 2.0 + IIS 4.0 + Windows NT Server 4.0 + Service Pack 6a Details The Index Server Sample file SQLQHit.asp shipped with Microsoft Index Server 2.0 and Option pack 4.0 , i...

CVE-1999-1289

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address (e.g., via NAT), potentially exposing sensitive information about the client or internal network configuration. The description does not specify affected vers...

CVE-1999-1364

Windows NT 4.0 is affected. Local users can crash the system by supplying an illegal kernel mode address to GetThreadContext or SetThreadContext, causing a denial of service. The description does not provide patches or mitigations; no additional exploit details are given.

CVE-1999-1291

The CVE-1999-1291 entry concerns the TCP/IP stack in Microsoft Windows 95 and Windows NT 4.0 (potentially others). The vulnerability allows an remote attacker to reset a target’s TCP connections by forcing a reset (RST) in a crafted packet flow (e.g., via a PSH ACK or similar), using the resultin...

CVE-1999-1364

Windows NT 4.0 allows local users to cause a denial of service crash via an illegal kernel mode address to the functions 1 GetThreadContext or 2 SetThreadContext...

CVE-1999-1387

Windows NT 4.0 SP2 allows remote attackers to cause a denial of service crash, possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25...

CVE-1999-1195

NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly...

CVE-1999-1361

Windows NT 3.51 and 4.0 running WINS Windows Internet Name Service allows remote attackers to cause a denial of service resource exhaustion via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages...

CVE-1999-1387

The CVE describes a remote denial-of-service in Windows NT 4.0 SP2 caused by malformed SMB inputs/packets (e.g., a Linux smbmount-generated packet) that can crash the system when executed on an older kernel. Affected software: Windows NT 4.0 SP2. Root cause: improper handling of crafted inputs le...

CVE-1999-1463

Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service crash by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session...

CVE-1999-1234

The CVE concerns LSA/LSASS.EXE on Windows NT 4.0. A NULL policy handle allows remote attackers to cause a denial of service via three specific Samr calls: SamrOpenDomain, SamrEnumDomainUsers, and SamrQueryDomainInfo. The affected component is the Local Security Authority (LSA) within LSASS; root ...