CVE-1999-1195

CVE-1999-1195 affects NAI VirusScan NT 4.0.2, where updating the virus-definition file (scan.dat) via FTP does not properly modify the file, yet the update is reported as successful. The consequence is that a system administrator could believe the definitions have been updated correctly when they...

CVE-1999-1361

Windows NT 3.51 and 4.0 running WINS are affected by CVE-1999-1361, where a remote attacker can cause a denial of service by sending a flood of malformed packets. The issue may exhaust resources, degrade performance, and fill event logs with errors. The available sources describe the vulnerabilit...

CVE-1999-1463

Windows NT 4.0 before SP3 is affected by CVE-1999-1463 via the TCP/IP stack. The issue arises when a remote attacker sends improperly fragmented IP packets without the first fragment, which are reassembled by the stack into a valid session, allowing bypass of firewall restrictions or causing a de...

CVE-1999-1254

Technical details (affected software, vulnerability specifics, and remediation) are not publicly provided in the connected documents. Monitor for updates.

CVE-1999-1289

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address e.g. through NAT, which provides remote attackers with potentially sensitive information about the client or the internal network configuration...

CVE-1999-1234

LSA LSASS.EXE in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to 1 SamrOpenDomain, 2 SamrEnumDomainUsers, and 3 SamrQueryDomainInfo...

CVE-1999-1049

ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...

CVE-1999-1049

ARCserve NT agents authenticate using a weak XOR scheme for passwords. The vulnerability allows remote attackers to sniff the authentication request sent to port 6050 and decrypt the password, leading to potential unauthorized access and confidentiality/ integrity impact as described in the CVE e...

CVE-1999-1289: Undefined Security Weakness

ICQ 98 beta on Windows NT leaks the internal IP address of a client in the TCP data segment of an ICQ packet instead of the public address e.g. through NAT, which provides remote attackers with potentially sensitive information about the client or the internal network configuration...

CVE-1999-1254: Undefined Security Weakness

Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables...

CVE-1999-1361: Undefined Security Weakness

Windows NT 3.51 and 4.0 running WINS Windows Internet Name Service allows remote attackers to cause a denial of service resource exhaustion via a flood of malformed packets, which causes the server to slow down and fill the event logs with error messages...

CVE-1999-1195: Undefined Security Weakness

NAI VirusScan NT 4.0.2 does not properly modify the scan.dat virus definition file during an update via FTP, but it reports that the update was successful, which could cause a system administrator to believe that the definitions have been updated correctly...

CVE-1999-1463: Undefined Security Weakness

Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service crash by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session...

CVE-1999-1364: Undefined Security Weakness

Windows NT 4.0 allows local users to cause a denial of service crash via an illegal kernel mode address to the functions 1 GetThreadContext or 2 SetThreadContext...

CVE-1999-1234: Undefined Security Weakness

LSA LSASS.EXE in Windows NT 4.0 allows remote attackers to cause a denial of service via a NULL policy handle in a call to 1 SamrOpenDomain, 2 SamrEnumDomainUsers, and 3 SamrQueryDomainInfo...

CVE-1999-1291: Undefined Security Weakness

TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset RST via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target...

CVE-1999-1387: Undefined Security Weakness

Windows NT 4.0 SP2 allows remote attackers to cause a denial of service crash, possibly via malformed inputs or packets, such as those generated by a Linux smbmount command that was compiled on the Linux 2.0.29 kernel but executed on Linux 2.0.25...

CVE-1999-1049: Undefined Security Weakness

ARCserve NT agents use weak encryption XOR for passwords, which allows remote attackers to sniff the authentication request to port 6050 and decrypt the password...

RPC DoS против MS Exchange/SQL/Windows NT/2000

Некорректный RPCзапрос приводит к краху сервисов...

Security Bulletin MS01-048

---------------------------------------------------------------------- Title: Malformed Request to RPC Endpoint Mapper can Cause RPC Service to Fail Date: 10 September 2001 Software: Microsoftr Windows NTr 4.0 Impact: Denial of service Bulletin: MS01-048 Microsoft encourages customers to review...